CA BrightStor ARCserve Backup unauthorized RPC access updated since 27.11.2007
Published:		06.12.2007
Source:		BUGTRAQ
SecurityVulns ID:		8382
Type:		remote
Level:		6/10
Description:		Multiple unsafe methods are available with RPC interface.

Affected:		CA : Brightstor ARCserve Backup 11.1
		CA : Brightstor ARCserve Backup 11.0
		CA : BrightStor ARCserve Backup 10.5
		CA : BrightStor ARCserve Backup 9.01
		CA : Brightstor ARCserve Backup 11.5
CVE:		CVE-2007-5328 (CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code via a "Privileged function exposure.")

Original document		cocoruder, [Full-disclosure] [UPDATE]CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability (06.12.2007)
		ZDI, ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability (27.11.2007)

Discuss:

Read or add your comments to this news (0 comments)