CVE-2007-5005

Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows…

published October 1, 2007

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

🚨 A tricky directory traversal flaw in rxRPC.dll could let attackers overwrite files on your system! 😱 Think of it like a delivery person who can drop off packages anywhere in your house, not just the front door — if they have the right address, they can cause chaos! An attacker could exploit this vulnerability to upload malicious files, potentially compromising your entire system and leading to unauthorized access or data loss. This is especially concerning for those using affected versions of BrightStor ARCserve Backup, as it could lead to severe operational disruptions.

Put simply

Think of it like a delivery person who can drop off packages anywhere in your house, not just the front door — if they have the right address, they can cause chaos! This directory traversal vulnerability in CA BrightStor ARCserve Backup allows remote attackers to manipulate destination filenames using dot-dot backslashes, effectively bypassing security measures and overwriting arbitrary files during the file transfer process.

What to do

An attacker could exploit this vulnerability to upload malicious files, potentially compromising your entire system and leading to unauthorized access or data loss. This is especially concerning for those using affected versions of BrightStor ARCserve Backup, as it could lead to severe operational disruptions. To mitigate this risk, ensure you update CA BrightStor ARCserve Backup to the latest version beyond r11.5. Additionally, review your file permissions and implement strict input validation to prevent such traversal exploits in the future. You've got this! Take these steps, and you'll boost your system's defenses in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05240 · 92.5th percentile
Published
2007-10-01T20:00Z
EPSS history
Timeline
  • 01 OCT 20:00Z
    Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows…
    cvelistv5