CVE-2007-5325 in BrightStor ARCserve Backup

Summary

Multiple buffer overflows in (1) the Message Engine and (2) AScore.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via unspecified vectors.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

10/10/2007

Disclosure

10/12/2007

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
3385	CA BrightStor ARCserve Backup Authentication memory corruption	119	Proof-of-Concept	Official fix	CVE-2007-5325
3384	CA BrightStor ARCserve Backup div. memory corruption	119	Proof-of-Concept	Official fix	CVE-2007-5325
3383	CA BrightStor ARCserve Backup RPC memory corruption	119	Proof-of-Concept	Official fix	CVE-2007-5325

Sources

• MITRE
• NVD
• CVE Details