Unscored severity · published Jan 11, 2007
CVE-2007-0169
Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote…
–
CVSS
70.7%
EPSS
No
On KEV
Description
Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums (1) 0x2F and (2) 0x75 in the (a) Message Engine RPC service, or opnum (3) 0xCF in the Tape Engine service.
Exploitation
Is it being used?
Exploit prediction (EPSS)70.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Brightstor Arcserve Backup · Broadcom
through 11.5; 9.01 · source: NVD
BE
Brightstor Enterprise Backup · Broadcom
10.5 · source: NVD
BP
Business Protection Suite · Broadcom
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0169
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0169
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=467
osvdb.org
http://osvdb.org/31327
Vendor Advisory
http://secunia.com/advisories/23648
securitytracker.com
http://securitytracker.com/id?1017506
Patch
http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp
US Government Resource
http://www.kb.cert.org/vuls/id/151032
More from Brightstor Arcserve Backup
–
CVE-2008-3175
Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary…
–
CVE-2008-2241
Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via…
–
CVE-2008-2242
Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by…
–
CVE-2008-1979
The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value…
–
CVE-2007-4620
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products…