CVEvulnerability
CVE-2007-0169
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-01-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums (1) 0x2F and (2) 0x75 in the (a) Message Engine RPC service, or opnum (3) 0xCF in the Tape Engine service.
Affected configurations
• broadcom brightstor arcserve backup (<= 11.5)
• broadcom brightstor arcserve backup 9.01
• broadcom brightstor enterprise backup 10.5
• broadcom business protection suite 2.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=467 labs.idefense.com
- http://osvdb.org/31327 osvdb.org
- http://secunia.com/advisories/23648 Vendor Advisory
- http://securitytracker.com/id?1017506 securitytracker.com
- http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp Patch
- http://www.kb.cert.org/vuls/id/151032 US Government Resource
- http://www.kb.cert.org/vuls/id/180336 US Government Resource
- http://www.securityfocus.com/archive/1/456618/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/456619/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/456711 www.securityfocus.com
- http://www.securityfocus.com/bid/22005 www.securityfocus.com
- http://www.securityfocus.com/bid/22006 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0154 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-003.html Exploit
- http://www.zerodayinitiative.com/advisories/ZDI-07-004.html Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31433 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31443 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=467 labs.idefense.com
- http://osvdb.org/31327 osvdb.org
- http://secunia.com/advisories/23648 Vendor Advisory
- http://securitytracker.com/id?1017506 securitytracker.com
- http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp Patch
- http://www.kb.cert.org/vuls/id/151032 US Government Resource
- http://www.kb.cert.org/vuls/id/180336 US Government Resource
- http://www.securityfocus.com/archive/1/456618/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/456619/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/456711 www.securityfocus.com
- http://www.securityfocus.com/bid/22005 www.securityfocus.com
- http://www.securityfocus.com/bid/22006 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0154 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-003.html Exploit
- http://www.zerodayinitiative.com/advisories/ZDI-07-004.html Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31433 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31443 exchange.xforce.ibmcloud.com