CVE-2007-0816 The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service (service crash) via a cra...
MediumCVSS 5.0
EPSS 11.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service (service crash) via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null credentials or verifier fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom brightstor arcserve backup | = 11 | No fix listed |
| broadcom brightstor arcserve backup | = 11.1 | No fix listed |
| broadcom brightstor arcserve backup | = 11.5 | No fix listed |
| broadcom brightstor arcserve backup | = 11.5-sp1 | No fix listed |
| broadcom brightstor arcserve backup | = 11.5-sp2 | No fix listed |
References
- 32989 vdb-entry
- 24009 third-party-advisory
- 24512 third-party-advisory
- supportconnectw.ca.com
- 22365 vdb-entry
- ADV-2007-0461 vdb-entry
- www3.ca.com
- www3.ca.com
- brightstor-catirpc-dos(32137) vdb-entry
- 3248 exploit