CVE-2007-5330 The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to (1) execute arbitrary code via stack-based buffer overflows in unspe...
HighCVSS 10.0
EPSS 13.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to (1) execute arbitrary code via stack-based buffer overflows in unspecified RPC procedures, and (2) trigger memory corruption related to the use of "handle" RPC arguments as pointers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom brightstor arcserve backup | = 9.01 | No fix listed |
| broadcom brightstor arcserve backup | = 10.5 | No fix listed |
| broadcom brightstor arcserve backup | = 11 | No fix listed |
| broadcom brightstor arcserve backup | = 11.1 | No fix listed |
| broadcom brightstor arcserve backup | = 11.5 | No fix listed |
| broadcom brightstor enterprise backup | = 10.5 | No fix listed |
References
- 41373 vdb-entry
- 41374 vdb-entry
- 27192 third-party-advisory
- secunia.com patch vendor-advisory
- supportconnectw.ca.com patch
- 20071011 [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities mailing-list
- 26015 vdb-entry
- 1018805 vdb-entry
- ADV-2007-3470 vdb-entry
- ca-brightstor-rpc-code-execution(37070) vdb-entry