CVE-2007-0169 Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute...
HighCVSS 7.5
EPSS 70.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums (1) 0x2F and (2) 0x75 in the (a) Message Engine RPC service, or opnum (3) 0xCF in the Tape Engine service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom brightstor arcserve backup | <= 11.5 | No fix listed |
| broadcom brightstor arcserve backup | = 9.01 | No fix listed |
| broadcom brightstor enterprise backup | = 10.5 | No fix listed |
| broadcom business protection suite | = 2.0 | No fix listed |
References
- 20070111 Computer Associates BrightStor ARCserve Backup RPC Engine PFC Request Buffer Overflow Vulnerability third-party-advisory
- 31327 vdb-entry
- 23648 third-party-advisory vendor-advisory
- 1017506 vdb-entry
- supportconnectw.ca.com patch
- VU#151032 third-party-advisory us-government-resource
- VU#180336 third-party-advisory us-government-resource
- 20070111 ZDI-07-004: CA BrightStor ARCserve Backup Tape Engine Buffer Overflow Vulnerability mailing-list
- 20070111 ZDI-07-003: CA BrightStor ARCserve Backup Message Engine Buffer Overflow Vulnerability mailing-list
- 20070111 [CAID 34955, 34956, 34957, 34958, 34959, 34817]: CA BrightStor ARCserve Backup Multiple Overflow Vulnerabilities mailing-list
- 22005 vdb-entry
- 22006 vdb-entry
- ADV-2007-0154 vdb-entry vendor-advisory
- www.zerodayinitiative.com exploit
- www.zerodayinitiative.com exploit
- brightstor-tapeengine-rpc-bo(31433) vdb-entry
- brightstor-messageengine-rpc-bo(31443) vdb-entry