CVE-2007-5006 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2007-5006
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-5006

Description: Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores.

CVE Status: Candidate

References: ST 1018728 SAID Secunia Advisory: SA25606 IDEFENSE http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=598 CONFIRM http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006 http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35677 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/480252/100/100/threaded BID 24348

Return to the previous page.