CVE-2007-0168
- State
- Published
- Severity
- Not scored
- Published
- Jan 11, 2007
- Updated
- Aug 7, 2024
- Reserved
- Jan 10, 2007
Description
The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp
- http://livesploit.com/advisories/LS-20061002.pdf
- 22010vdb-entry
- brightstor-tapeengine-code-execution(31442)vdb-entry
- 1017506vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-002.html
- 20070111 [CAID 34955, 34956, 34957, 34958, 34959, 34817]: CA BrightStor ARCserve Backup Multiple Overflow Vulnerabilitiesmailing-list
- 20070111 LS-20061002 - Computer Associates BrightStor ARCserve Backup Remote Code Execution Vulnerabilitymailing-list
- ADV-2007-0154vdb-entry
- 31327vdb-entry
- VU#662400third-party-advisory
- 20070111 ZDI-07-002: CA BrightStor ARCserve Backup Tape Engine Code Execution Vulnerabilitymailing-list
- http://www.lssec.com/advisories/LS-20061002.pdf
- 23648third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.