CVEvulnerability
CVE-2007-5327
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the RPC interface for the Message Engine (mediasvr.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a long argument in the 0x10d opnum.
Affected configurations
• broadcom brightstor arcserve backup 9.01
• broadcom brightstor arcserve backup 10.5
• broadcom brightstor arcserve backup 11
• broadcom brightstor arcserve backup 11.1
• broadcom brightstor arcserve backup 11.5
• broadcom brightstor enterprise backup 10.5
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://ruder.cdut.net/blogview.asp?logID=231 ruder.cdut.net
- http://secunia.com/advisories/27192 secunia.com
- http://securityreason.com/securityalert/3218 securityreason.com
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp Patch
- http://www.fortiguardcenter.com/advisory/FGA-2007-11.html Vendor Advisory
- http://www.securityfocus.com/archive/1/482112/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/482121/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26015 www.securityfocus.com
- http://www.securitytracker.com/id?1018805 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3470 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37064 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37065 exchange.xforce.ibmcloud.com
- http://ruder.cdut.net/blogview.asp?logID=231 ruder.cdut.net
- http://secunia.com/advisories/27192 secunia.com
- http://securityreason.com/securityalert/3218 securityreason.com
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp Patch
- http://www.fortiguardcenter.com/advisory/FGA-2007-11.html Vendor Advisory
- http://www.securityfocus.com/archive/1/482112/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/482121/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26015 www.securityfocus.com
- http://www.securitytracker.com/id?1018805 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3470 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37064 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37065 exchange.xforce.ibmcloud.com