cbcvebase.
CVE-2007-5331
published 2007-10-13

CVE-2007-5331: Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote…

PriorityP352critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
9.90%
95.0th percentile
Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a malformed ONRPC protocol request for operation 0x76, which causes ARCserve Backup to dereference arbitrary pointers.

Affected

8 ranges
VendorProductVersion rangeFixed in
broadcombrightstor_arcserve_backup——
broadcombrightstor_arcserve_backup——
broadcombrightstor_arcserve_backup——
broadcombrightstor_enterprise_backup——
broadcombusiness_protection_suite——
broadcomserver_protection_suite——
cabrightstor_arcserve_backup——
cabusiness_protection_suite——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.