CVE-2007-1785 The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in ca...
HighCVSS 7.1
EPSS 15.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf) RPC request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom brightstor arcserve backup | = 9.01 | No fix listed |
| broadcom brightstor arcserve backup | = 11.1 | No fix listed |
| broadcom brightstor arcserve backup | = 11.5 | No fix listed |
| broadcom brightstor arcserve backup | = 11.5-sp1 | No fix listed |
| broadcom brightstor arcserve backup | = 11.5-sp2 | No fix listed |
| ca brightstor arcserve backup | = 11 | No fix listed |
References
- 20070329 CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability mailing-list
- 24682 third-party-advisory vendor-advisory
- 2509 third-party-advisory
- supportconnectw.ca.com
- VU#151305 third-party-advisory us-government-resource
- 20070330 CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability mailing-list
- 20070331 CA BrightStor ARCserve Backup Mediasvr.exe vulnerability mailing-list
- 23209 vdb-entry
- 1017830 vdb-entry
- www.shirkdog.us
- www.shirkdog.us
- ADV-2007-1161 vdb-entry
- brightstor-mediasvr-bo(33316) vdb-entry