CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Permissions Privileges and Access Controls
Summary: the message engine rpc service in ca brightstor arcserve backup v9.01 through r11.5, and enterprise backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "privileged function exposure."
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2007-10-13
Last Modified Date: 2018-10-15