Vulnerability Details CVE-2007-5328
The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.049
EPSS Ranking 89.0%
CVSS Severity
CVSS v2 Score 10.0
References
- http://secunia.com/advisories/27192
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp
- http://www.securityfocus.com/archive/1/482121/100/0/threaded
- http://www.securityfocus.com/archive/1/484229/100/0/threaded
- http://www.securityfocus.com/bid/26015
- http://www.securitytracker.com/id?1018805
- http://www.vupen.com/english/advisories/2007/3470
- http://www.zerodayinitiative.com/advisories/ZDI-07-069.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37067
- http://secunia.com/advisories/27192
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp
- http://www.securityfocus.com/archive/1/482121/100/0/threaded
- http://www.securityfocus.com/archive/1/484229/100/0/threaded
- http://www.securityfocus.com/bid/26015
- http://www.securitytracker.com/id?1018805
- http://www.vupen.com/english/advisories/2007/3470
- http://www.zerodayinitiative.com/advisories/ZDI-07-069.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37067
Products affected by CVE-2007-5328
-
cpe:2.3:a:broadcom:brightstor_arcserve_backup:10.5
-
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11
-
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1
-
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5
-
cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01
-
cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5