CVE-2007-5006

2007-10-0120:17:00

CWE-287

[email protected]

web.nvd.nist.gov

cve-2007-5006

ca brightstor arcserve backup

remote attack

user authentication

client restore

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

Low

0.068 Low

EPSS

Percentile

93.9%

JSON

Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores.

Affected configurations

NVD

Node

broadcombrightstor_arcserve_backup_laptops_desktopsMatch4.0

broadcombrightstor_arcserve_backup_laptops_desktopsMatch11.0

broadcombrightstor_arcserve_backup_laptops_desktopsMatch11.1

broadcombrightstor_arcserve_backup_laptops_desktopsMatch11.1sp1

broadcombrightstor_arcserve_backup_laptops_desktopsMatch11.5

broadcomdesktop_management_suiteMatch11.0

broadcomdesktop_management_suiteMatch11.1

broadcomdesktop_management_suiteMatch11.2

caprotection_suitesMatchr2

CPENameOperatorVersion
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq4.0
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq11.0
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq11.1
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq11.5
broadcom:desktop_management_suitebroadcom desktop management suiteeq11.0
broadcom:desktop_management_suitebroadcom desktop management suiteeq11.1
broadcom:desktop_management_suitebroadcom desktop management suiteeq11.2
ca:protection_suitesca protection suiteseqr2

CPE	Name	Operator	Version
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	4.0
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	11.0
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	11.1
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	11.5
broadcom:desktop_management_suite	broadcom desktop management suite	eq	11.0
broadcom:desktop_management_suite	broadcom desktop management suite	eq	11.1
broadcom:desktop_management_suite	broadcom desktop management suite	eq	11.2
ca:protection_suites	ca protection suites	eq	r2