CVE-2007-0169

Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums (1) 0x2F and (2) 0x75 in the (a) Message Engine RPC service, or opnum (3) 0xCF in the Tape Engine service.

Link	Resource
http://www.zerodayinitiative.com/advisories/ZDI-07-003.html	Exploit
http://www.zerodayinitiative.com/advisories/ZDI-07-004.html	Exploit
http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp	Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=467
http://www.kb.cert.org/vuls/id/180336	US Government Resource
http://secunia.com/advisories/23648	Vendor Advisory
http://www.kb.cert.org/vuls/id/151032	US Government Resource
http://www.securityfocus.com/bid/22005
http://www.securityfocus.com/bid/22006
http://securitytracker.com/id?1017506
http://www.securityfocus.com/archive/1/456711
http://osvdb.org/31327
http://www.vupen.com/english/advisories/2007/0154	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31443
https://exchange.xforce.ibmcloud.com/vulnerabilities/31433
http://www.securityfocus.com/archive/1/456619/100/0/threaded
http://www.securityfocus.com/archive/1/456618/100/0/threaded

Configuration 1

cpe:2.3:a:broadcom:brightstor_arcserve_backup:*:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:* cpe:2.3:a:broadcom:business_protection_suite:2.0:*:*:*:*:*:*:*

---

Published : 2007-01-11 10:28

Updated : 2021-04-07 06:53

---

NVD link : CVE-2007-0169

Mitre link : CVE-2007-0169

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer