CVE-2007-2139 Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightS...
HighCVSS 10.0
EPSS 78.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom brightstor arcserve backup | = 9.01 | No fix listed |
| broadcom brightstor arcserve backup | = 11.1 | No fix listed |
| broadcom brightstor arcserve backup | = 11.5-sp2 | No fix listed |
| broadcom business protection suite | = 2.0 | No fix listed |
| broadcom server protection suite | = 2 | No fix listed |
| ca brightstor arcserve backup | = 11 | No fix listed |
| ca business protection suite | = 2.0 | No fix listed |
References
- 35326 vdb-entry
- 24972 third-party-advisory
- 2628 third-party-advisory
- supportconnectw.ca.com
- VU#979825 third-party-advisory us-government-resource
- 20070424 ZDI-07-022: CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities mailing-list
- 23635 patch vdb-entry
- 1017952 vdb-entry
- ADV-2007-1529 vdb-entry
- www.zerodayinitiative.com
- brightstor-sun-rpc-bo(33854) vdb-entry