NVD

Id
57404  
Name
CVE-2007-5328  
Description
The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-10-12  
Modified Date
2011-03-07  
Seq
2007-5328  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
293287 57404 CVE-2007-5328 http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp  View
293288 57404 CVE-2007-5328 20071011 [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities  View
293289 57404 CVE-2007-5328 20071126 ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability  View
293290 57404 CVE-2007-5328 26015  View
293291 57404 CVE-2007-5328 1018805  View
293292 57404 CVE-2007-5328 ADV-2007-3470  View
293293 57404 CVE-2007-5328 http://www.zerodayinitiative.com/advisories/ZDI-07-069.html  View
293294 57404 CVE-2007-5328 ca-brightstor-unspecified-security-bypass(37067)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52428 JVNDB-2007-001120 CA BrightStor ARCServe BackUp のメッセージエンジン RPC サービスの安全ではないメソッド呼び出しの脆弱性 CA BrightStor ARCServe BackUp のメッセージエンジン RPC サービスには、ファイルシステムおよびレジストリを修正する処理において、安全ではないメソッド呼び出しのため、特権関数を指定することが可能となり、任意のコードを実行される脆弱性が存在します。 CVE-2007-5328 28683 CVE-2007-5328 57404 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001120.html 2007-10-10 2008-02-13 View