Unscored severity · published Oct 1, 2007
CVE-2007-5005
Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to…
–
CVSS
5.2%
EPSS
No
On KEV
Description
Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ (dot dot backslash) sequence in the destination filename argument to sub-function 8 in the rxrReceiveFileFromServer command.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.2% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Brightstor Arcserve Backup Laptops Desktops · Broadcom
4.0; 11.0; 11.1; 11.1; 11.5 · source: NVD
DM
Desktop Management Suite · Broadcom
11.0; 11.1; 11.2 · source: NVD
PS
Protection Suites · CA
r2 · source: NVD
Affected product
BA
Brightstor Arcserve Backup Laptops Desktops
Broadcom
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5005
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5005
research.eeye.com
http://research.eeye.com/html/advisories/published/AD20070920.html
Patch
http://secunia.com/advisories/25606
Patch
http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp
Patch
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006
Patch
http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35676
www.securityfocus.com
http://www.securityfocus.com/archive/1/480252/100/100/threaded
More from Brightstor Arcserve Backup Laptops Desktops
–
CVE-2007-5003
Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute…
–
CVE-2007-5004
Integer overflow in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long…
–
CVE-2007-5006
Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which…
–
CVE-2007-3216
Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute…
–
CVE-2007-0673
LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) via a value of 0xFFFFFFFF at a certain…