Vulnerability CVE-2007-2139
Published: 2007-04-25   Modified: 2012-02-12

Description:
Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.

See advisories in our WLB2 database:
Topic
Author
Date
High
CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities
Tenable Network ...
27.04.2007

Type:

CWE-Other

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
CA -> Brightstor arcserve backup 
CA -> Business protection suite 
CA -> Server protection suite 

 References:
http://securityreason.com/securityalert/2628
http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp
http://www.kb.cert.org/vuls/id/979825
http://www.securityfocus.com/archive/1/466790/100/0/threaded
http://www.securityfocus.com/bid/23635
http://www.securitytracker.com/id?1017952
http://www.vupen.com/english/advisories/2007/1529
http://www.zerodayinitiative.com/advisories/ZDI-07-022.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/33854
Copyright 2024, cxsecurity.com

 

Back to Top