Vulnerability Details : CVE-2007-5006
Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores.
Vulnerability category: BypassGain privilege
Exploit prediction scoring system (EPSS) score for CVE-2007-5006
Probability of exploitation activity in the next 30 days: 7.08%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 94 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2007-5006
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
CWE ids for CVE-2007-5006
-
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.Assigned by: nvd@nist.gov (Primary)
References for CVE-2007-5006
- http://www.securityfocus.com/archive/1/480252/100/100/threaded
-
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=598
-
http://www.securityfocus.com/bid/24348
Computer Associates ARCserve Backup Multiple Remote Buffer Overflow Vulnerabilities
- http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp
-
http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35677
Patch
- http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006
- http://www.securitytracker.com/id?1018728
Products affected by CVE-2007-5006
- cpe:2.3:a:ca:protection_suites:r2:*:*:*:*:*:*:*
- cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.0:*:*:*:*:*:*:*
- cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:*:*:*:*:*:*:*
- cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:sp1:*:*:*:*:*:*
- cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.5:*:*:*:*:*:*:*
- cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:broadcom:desktop_management_suite:11.0:*:*:*:*:*:*:*
- cpe:2.3:a:broadcom:desktop_management_suite:11.1:*:*:*:*:*:*:*
- cpe:2.3:a:broadcom:desktop_management_suite:11.2:*:*:*:*:*:*:*