CVE-2007-1785

CA BrightStor Backup 11.5.2.0 - 'Mediasvr.exe' Remote Code

Severity Score

7.1

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf) RPC request.

El servicio RPC en mediasvr.exe en CA BrightStor ARCserve Backup 11.5 SP2 construcción 4237 permite a atacantes remotos ejecutar código de su elección a través de datos xdr_handle_t manipulados en paquetes RPC, el cual es utilizado en el cálculo de la dirección para una función de llamada, como se demostró utilizando la respuesta RPC 191 (0xbf).

*Credits: N/A

CVSS Scores

NISTv2 7.1

Attack Vector

Network

Attack Complexity

High

Authentication

Single

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-03-29 First Exploit
2007-03-30 CVE Reserved
2007-03-31 CVE Published
2023-12-25 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (14)

URL	Tag	Source
http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0467.html	Mailing List
http://securityreason.com/securityalert/2509	Third Party Advisory
http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp	X_refsource_confirm
http://www.kb.cert.org/vuls/id/151305	Third Party Advisory
http://www.securityfocus.com/archive/1/464270/100/0/threaded	Mailing List
http://www.securityfocus.com/archive/1/464343/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/23209	Vdb Entry
http://www.securitytracker.com/id?1017830	Vdb Entry
http://www.shirkdog.us/camediasvrremote.py	X_refsource_misc
http://www.shirkdog.us/shk-004.html	X_refsource_misc
http://www.vupen.com/english/advisories/2007/1161	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/33316	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/3604	2007-03-29

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/24682	2021-04-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Broadcom Search vendor "Broadcom"		Brightstor Arcserve Backup Search vendor "Broadcom" for product "Brightstor Arcserve Backup"				9.01 Search vendor "Broadcom" for product "Brightstor Arcserve Backup" and version "9.01"		-		Affected
Broadcom Search vendor "Broadcom"		Brightstor Arcserve Backup Search vendor "Broadcom" for product "Brightstor Arcserve Backup"				11.1 Search vendor "Broadcom" for product "Brightstor Arcserve Backup" and version "11.1"		-		Affected
Broadcom Search vendor "Broadcom"		Brightstor Arcserve Backup Search vendor "Broadcom" for product "Brightstor Arcserve Backup"				11.5 Search vendor "Broadcom" for product "Brightstor Arcserve Backup" and version "11.5"		-		Affected
Broadcom Search vendor "Broadcom"		Brightstor Arcserve Backup Search vendor "Broadcom" for product "Brightstor Arcserve Backup"				11.5 Search vendor "Broadcom" for product "Brightstor Arcserve Backup" and version "11.5"		sp1		Affected
Broadcom Search vendor "Broadcom"		Brightstor Arcserve Backup Search vendor "Broadcom" for product "Brightstor Arcserve Backup"				11.5 Search vendor "Broadcom" for product "Brightstor Arcserve Backup" and version "11.5"		sp2		Affected
Ca Search vendor "Ca"		Brightstor Arcserve Backup Search vendor "Ca" for product "Brightstor Arcserve Backup"				11 Search vendor "Ca" for product "Brightstor Arcserve Backup" and version "11"		windows		Affected