CVE-2007-0169
- State
- Published
- Severity
- Not scored
- Published
- Jan 11, 2007
- Updated
- Aug 7, 2024
- Reserved
- Jan 10, 2007
Description
Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums (1) 0x2F and (2) 0x75 in the (a) Message Engine RPC service, or opnum (3) 0xCF in the Tape Engine service.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20070111 ZDI-07-003: CA BrightStor ARCserve Backup Message Engine Buffer Overflow Vulnerabilitymailing-list
- http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp
- brightstor-messageengine-rpc-bo(31443)vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-004.html
- 1017506vdb-entry
- 22006vdb-entry
- 22005vdb-entry
- 20070111 [CAID 34955, 34956, 34957, 34958, 34959, 34817]: CA BrightStor ARCserve Backup Multiple Overflow Vulnerabilitiesmailing-list
- 20070111 ZDI-07-004: CA BrightStor ARCserve Backup Tape Engine Buffer Overflow Vulnerabilitymailing-list
- 20070111 Computer Associates BrightStor ARCserve Backup RPC Engine PFC Request Buffer Overflow Vulnerabilitythird-party-advisory
- ADV-2007-0154vdb-entry
- 31327vdb-entry
- VU#151032third-party-advisory
- VU#180336third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-003.html
- brightstor-tapeengine-rpc-bo(31433)vdb-entry
- 23648third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.