CVE

Id
28685  
CVE No.
CVE-2007-5328  
Status
Candidate  
Description
The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."  
Phase
Assigned (20071010)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
298944 28685 CVE-2007-5328 BUGTRAQ:20071011 [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities  View
298945 28685 CVE-2007-5328 URL:http://www.securityfocus.com/archive/1/archive/1/482121/100/0/threaded  View
298946 28685 CVE-2007-5328 BUGTRAQ:20071126 ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability  View
298947 28685 CVE-2007-5328 URL:http://www.securityfocus.com/archive/1/archive/1/484229/100/0/threaded  View
298948 28685 CVE-2007-5328 MISC:http://www.zerodayinitiative.com/advisories/ZDI-07-069.html  View
298949 28685 CVE-2007-5328 CONFIRM:http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp  View
298950 28685 CVE-2007-5328 BID:26015  View
298951 28685 CVE-2007-5328 URL:http://www.securityfocus.com/bid/26015  View
298952 28685 CVE-2007-5328 VUPEN:ADV-2007-3470  View
298953 28685 CVE-2007-5328 URL:http://www.vupen.com/english/advisories/2007/3470  View
298954 28685 CVE-2007-5328 SECTRACK:1018805  View
298955 28685 CVE-2007-5328 URL:http://www.securitytracker.com/id?1018805  View
298956 28685 CVE-2007-5328 SECUNIA:27192  View
298957 28685 CVE-2007-5328 URL:http://secunia.com/advisories/27192  View
298958 28685 CVE-2007-5328 XF:ca-brightstor-unspecified-security-bypass(37067)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52430 JVNDB-2007-001122 CA BrightStor ARCServe BackUp の cadbd RPC サービスにおける複数のメモリ破壊の脆弱性 CA BrightStor ARCServe BackUp の cadbd RPC サービスには、RPC プロシージャにスタックベースのバッファオーバーフローが発生する脆弱性および、RPC 引数のポインタの扱いに関するメモリ破壊の脆弱性が存在します。 CVE-2007-5330 28685 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001122.html  View