CVE-2007-2139
CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.
Múltiple desbordamiento de búfer basado en pila en el servicio SUN RPC del CA (antiguamente Computer Associates) BrightStor ARCserve Media Server, como el utilizado en el BrightStor ARCserve Backup 9.01 hasta la 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2 y Business Protection Suite 2, permite a atacantes remotos ejecutar código de su elección a través de cadenas RPC mal formadas. Vulnerabilidad diferente a las CVE-2006-5171, CVE-2006-5172 y CVE-2007-1785.
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates BrightStor ARCserve Media Server. User interaction is not required to exploit this vulnerability.
The specific flaw exists in the SUN RPC service which binds to a randomly chosen high TCP port. The target port can be obtained by querying the port mapper. Multiple stack-based buffer overflows exist during the parsing of malformed RPC strings. Exploitation of these overflows can result in arbitrary code execution.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2007-04-18 CVE Reserved
- 2007-04-24 CVE Published
- 2010-06-22 First Exploit
- 2024-08-07 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/35326 | Vdb Entry | |
| http://secunia.com/advisories/24972 | Third Party Advisory | |
| http://securityreason.com/securityalert/2628 | Third Party Advisory | |
| http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp | X_refsource_confirm | |
| http://www.kb.cert.org/vuls/id/979825 | Third Party Advisory |
|
| http://www.securityfocus.com/archive/1/466790/100/0/threaded | Mailing List | |
| http://www.securitytracker.com/id?1017952 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2007/1529 | Vdb Entry | |
| http://www.zerodayinitiative.com/advisories/ZDI-07-022.html | X_refsource_misc |
|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/33854 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/16413 | 2010-06-22 |
| URL | Date | SRC |
|---|---|---|
| http://www.securityfocus.com/bid/23635 | 2021-04-09 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Broadcom Search vendor "Broadcom" | Brightstor Arcserve Backup Search vendor "Broadcom" for product "Brightstor Arcserve Backup" | 9.01 Search vendor "Broadcom" for product "Brightstor Arcserve Backup" and version "9.01" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor Arcserve Backup Search vendor "Broadcom" for product "Brightstor Arcserve Backup" | 11.1 Search vendor "Broadcom" for product "Brightstor Arcserve Backup" and version "11.1" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor Arcserve Backup Search vendor "Broadcom" for product "Brightstor Arcserve Backup" | 11.5 Search vendor "Broadcom" for product "Brightstor Arcserve Backup" and version "11.5" | sp2 |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Business Protection Suite Search vendor "Broadcom" for product "Business Protection Suite" | 2.0 Search vendor "Broadcom" for product "Business Protection Suite" and version "2.0" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Server Protection Suite Search vendor "Broadcom" for product "Server Protection Suite" | 2 Search vendor "Broadcom" for product "Server Protection Suite" and version "2" | - |
Affected
| ||||||
| Ca Search vendor "Ca" | Brightstor Arcserve Backup Search vendor "Ca" for product "Brightstor Arcserve Backup" | 11 Search vendor "Ca" for product "Brightstor Arcserve Backup" and version "11" | windows |
Affected
| ||||||
| Ca Search vendor "Ca" | Business Protection Suite Search vendor "Ca" for product "Business Protection Suite" | 2.0 Search vendor "Ca" for product "Business Protection Suite" and version "2.0" | microsoft_sbs_premium |
Affected
| ||||||
| Ca Search vendor "Ca" | Business Protection Suite Search vendor "Ca" for product "Business Protection Suite" | 2.0 Search vendor "Ca" for product "Business Protection Suite" and version "2.0" | microsoft_sbs_standard |
Affected
| ||||||