CVE-2007-5005

No fix known EPSS 5%

Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ (dot dot backslash) sequence in the destination filename argument to sub-function 8 in the rxrReceiveFileFromServer command.

Published 2007-10-01 · CVE record · OSV

Products: broadcom brightstor_arcserve_backup_laptops_desktops, broadcom desktop_management_suite, ca protection_suites