Lucene search

[email protected]CVE-2007-5006

HistoryOct 01, 2007 - 8:17 p.m.

CVE-2007-5006

2007-10-0120:17:00

CWE-287

[email protected]

web.nvd.nist.gov

cve-2007-5006

ca brightstor arcserve backup

remote attack

user authentication

client restore

6.8 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.071 Low

EPSS

Percentile

94.0%

JSON

Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores.

CPENameOperatorVersion
ca:protection_suitesca protection suiteseqr2
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq4.0
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq11.5
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq11.0
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq11.1
broadcom:desktop_management_suitebroadcom desktop management suiteeq11.2
broadcom:desktop_management_suitebroadcom desktop management suiteeq11.0
broadcom:desktop_management_suitebroadcom desktop management suiteeq11.1

CPE	Name	Operator	Version
ca:protection_suites	ca protection suites	eq	r2
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	4.0
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	11.5
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	11.0
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	11.1
broadcom:desktop_management_suite	broadcom desktop management suite	eq	11.2
broadcom:desktop_management_suite	broadcom desktop management suite	eq	11.0
broadcom:desktop_management_suite	broadcom desktop management suite	eq	11.1

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=598

secunia.com/advisories/25606

supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp

www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006

www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35677

www.securityfocus.com/archive/1/480252/100/100/threaded

www.securityfocus.com/bid/24348

www.securitytracker.com/id?1018728

Social References

6.8 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.071 Low

EPSS

Percentile

94.0%

JSON

Related for CVE-2007-5006

prion1 d21 securityvulns3 seebug1 nessus1