Description
The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."
References
- 27192 third-party-advisory
- ca-brightstor-unspecified-security-bypass(37067) vdb-entry
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp
- 20071126 ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability mailing-list
- 20071011 [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities mailing-list
- 26015 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-069.html
- 1018805 vdb-entry
- ADV-2007-3470 vdb-entry