CVE-2007-5328

critical

Description

The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/37067

http://www.zerodayinitiative.com/advisories/ZDI-07-069.html

http://www.vupen.com/english/advisories/2007/3470

http://www.securitytracker.com/id?1018805

http://www.securityfocus.com/bid/26015

http://www.securityfocus.com/archive/1/484229/100/0/threaded

http://www.securityfocus.com/archive/1/482121/100/0/threaded

http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp

http://secunia.com/advisories/27192

Details

Source: Mitre, NVD

Published: 2007-10-13

Updated: 2025-04-09

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.04907