OSVDB ID: 41351

Title: CA BrightStor ARCserve Backup for Laptops & Desktops Multiple Command Handlers Remote Privilege Escalation

Info

Disclosure

Sep 20, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Sep 20, 2007

Description

Classification

Location: Remote / Network Access
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Private, Exploit Commercial
Disclosure: Vendor Verified, Coordinated Disclosure

Solution

Upgrade to CA ARCserve Backup for Laptops and Desktops (BMB) to r4.0 or higher, and other products to version 11.1 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Security Tracker: 1018728
CVE ID: 2007-5006 (see also: NVD)
Bugtraq ID: 24348
Secunia Advisory ID: 25606
SCIP VulDB ID: 3112
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-09/0274.html
http://archives.neohapsis.com/archives/bugtraq/2007-09/0286.html
http://www.securityfocus.com/archive/1/archive/1/480252/100/100/threaded
Generic Exploit URL: http://d2sec.com/products.htm
Other Advisory URL: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=598
Vendor Specific News/Changelog Entry: http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006
http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35677

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/41351