CVE-2007-5325

2007-10-1300:17:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2007-5325

buffer overflow

ca brightstor arcserve backup

security vulnerability

nvd

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.266 Low

EPSS

Percentile

96.8%

JSON

Multiple buffer overflows in (1) the Message Engine and (2) AScore.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

NVD

Node

broadcombrightstor_arcserve_backupMatch9.01

broadcombrightstor_arcserve_backupMatch10.5

broadcombrightstor_arcserve_backupMatch11

broadcombrightstor_arcserve_backupMatch11.1

broadcombrightstor_arcserve_backupMatch11.5

broadcombrightstor_enterprise_backupMatch10.5

CPENameOperatorVersion
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq9.01
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq10.5
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq11
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq11.1
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq11.5
broadcom:brightstor_enterprise_backupbroadcom brightstor enterprise backupeq10.5

CPE	Name	Operator	Version
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	9.01
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	10.5
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	11
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	11.1
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	11.5
broadcom:brightstor_enterprise_backup	broadcom brightstor enterprise backup	eq	10.5