iDefense Security Advisory 09.20.07 – Remote exploitation of an authentication bypass vulnerability in Computer Associates Inc.’s ARCServe Backup for Laptops and Desktops allows attackers to execute arbitrary code with SYSTEM privileges. This vulnerability specifically exists since the command handlers that service network requests do not check to see if the peer is authenticated. iDefense has confirmed the existence of this vulnerability in ARCServe Backup for Laptops and Desktops version R11.1 Build 900. Other versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/59555/09.20.07-1.txt
Source: https://packetstormsecurity.com/files/59555/iDEFENSE-Security-Advisory-2007-09-20.1.html