NetSight
IP …
critical10.0

CVE-2007-5006

Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authen…

Impact

Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores.

Affected products

VendorProductAffected versions
BroadcomBrightstor Arcserve Backup Laptops Desktops
Versions 4.0, 11.0, 11.1, 11.5
BroadcomDesktop Management Suite
Versions 11.0, 11.1, 11.2
CaProtection Suites
Version r2

Weakness classification

CWE-287

References