CVE-2007-5004

2007-10-0120:17:00

CWE-189

[email protected]

web.nvd.nist.gov

cve-2007-5004

computer associates

brightstor arcserve backup

integer overflow

remote code execution

security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.919 High

EPSS

Percentile

99.0%

JSON

Integer overflow in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long username and a certain “useless” password.

Affected configurations

NVD

Node

broadcombrightstor_arcserve_backup_laptops_desktopsMatch4.0

broadcombrightstor_arcserve_backup_laptops_desktopsMatch11.0

broadcombrightstor_arcserve_backup_laptops_desktopsMatch11.1

broadcombrightstor_arcserve_backup_laptops_desktopsMatch11.1sp1

broadcombrightstor_arcserve_backup_laptops_desktopsMatch11.5

broadcomdesktop_management_suiteMatch11.0

broadcomdesktop_management_suiteMatch11.1

broadcomdesktop_management_suiteMatch11.2

caprotection_suitesMatchr2

CPENameOperatorVersion
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq4.0
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq11.0
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq11.1
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq11.5
broadcom:desktop_management_suitebroadcom desktop management suiteeq11.0
broadcom:desktop_management_suitebroadcom desktop management suiteeq11.1
broadcom:desktop_management_suitebroadcom desktop management suiteeq11.2
ca:protection_suitesca protection suiteseqr2

CPE	Name	Operator	Version
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	4.0
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	11.0
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	11.1
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	11.5
broadcom:desktop_management_suite	broadcom desktop management suite	eq	11.0
broadcom:desktop_management_suite	broadcom desktop management suite	eq	11.1
broadcom:desktop_management_suite	broadcom desktop management suite	eq	11.2
ca:protection_suites	ca protection suites	eq	r2