Vulnerability Description
Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a malformed ONRPC protocol request for operation 0x76, which causes ARCserve Backup to dereference arbitrary pointers.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Brightstor Arcserve Backup | 9.01 |
| Broadcom | Brightstor Enterprise Backup | 10.5 |
| Broadcom | Business Protection Suite | 2.0 |
| Broadcom | Server Protection Suite | 2 |
| Ca | Brightstor Arcserve Backup | 11 |
| Ca | Business Protection Suite | 2.0 |
Related Weaknesses (CWE)
References
- http://osvdb.org/41371
- http://research.eeye.com/html/advisories/published/AD20071011.html
- http://secunia.com/advisories/27192Vendor Advisory
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.aspPatch
- http://www.securityfocus.com/archive/1/482114/100/0/threaded
- http://www.securityfocus.com/archive/1/482121/100/0/threaded
- http://www.securityfocus.com/bid/24680
- http://www.securitytracker.com/id?1018805
- http://www.vupen.com/english/advisories/2007/3470Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37071
- http://osvdb.org/41371
- http://research.eeye.com/html/advisories/published/AD20071011.html
- http://secunia.com/advisories/27192Vendor Advisory
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.aspPatch
- http://www.securityfocus.com/archive/1/482114/100/0/threaded
FAQ
What is CVE-2007-5331?
CVE-2007-5331 is a vulnerability with a CVSS score of 10.0 (HIGH). Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a malf...
How severe is CVE-2007-5331?
CVE-2007-5331 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-5331?
Check the references section above for vendor advisories and patch information. Affected products include: Broadcom Brightstor Arcserve Backup, Broadcom Brightstor Enterprise Backup, Broadcom Business Protection Suite, Broadcom Server Protection Suite, Ca Brightstor Arcserve Backup.