CVE:CVE-2007-5005
CNNVD:CNNVD-200710-008
ARCServe Backup for Laptops and Desktops (L&D)是适用于中小业务的ARCServe Backup备份工具版本。
ARCserve L&D在处理RPC接口上的畸形请求数据时存在漏洞，远程攻击者可能利用此漏洞控制服务器或执行目录遍历。
ARCserve L&D使用TCP/1900端口做为RPC接口管理ARCserve L&D服务器，正常的通讯示例如下：
    0000000027rxrLogin~~administrator
    ---------------------------------------------
    Field 1: 10-digit base10 command length field ( 0000000027 )
    Field 2: RPC command ( rxrLogin )
    Field 3: Constant Argument Delimiter ( ~~ )
    Field 4: Argument ( administrator )
solution:Upgrade broadcom brightstor_arcserve_backup_laptops_desktops to a higher version than 4.0,11.0,11.1,11.1:sp1,11.5,and avoid the version 4.0,11.0,11.1,11.1:sp1,11.5; Upgrade broadcom desktop_management_suite to a higher version than 11.0,11.1,11.2,and avoid the version 11.0,11.1,11.2; Upgrade ca protection_suites to a higher version than r2,and avoid the version r2