CVE-2007-5005

CWE-22 — Path Traversal4 documents4 sources
Severity
10.0CRITICAL
EPSS
3.7%
top 12.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Broadcom Brightstor Arcserve Backup Laptops DesktopsBroadcom Desktop Management SuiteCA Protection Suites
Timeline
PublishedOct 1
Latest updateJun 14

Description

Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ (dot dot backslash) sequence in the destination filename argument to sub-function 8 in the rxrReceiveFileFromServer command.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages3 packages

▶NVDbroadcom/desktop_management_suite11.0, 11.1, 11.2+2

Patches

Patch: secunia.com ↗Patch: supportconnectw.ca.com ↗Patch: www.ca.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-vx68-whc5-qv39: Directory traversal vulnerability in rxRPC↗2022-05-01
▶
CVEList
CVE-2007-5005: Directory traversal vulnerability in rxRPC↗2007-10-01
▶

📋Vendor Advisories

1
Microsoft
Chromium: CVE-2022-2007 Use after free in WebGPU↗2022-06-14
▶
CVE-2007-5005 (CRITICAL CVSS 10) | Directory traversal vulnerability i | cvebase.io