PT-2007-3139 · Ca · Ca Brightstor Arcserve Backup

Publicado 2007-03-30 · Atualizado 2021-04-07 · CVE-2007-1785

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: CA BrightStor ARCserve Backup version 11.5 SP2 build 4237

Description: The issue concerns the RPC service in mediasvr.exe, which allows remote attackers to execute arbitrary code. This is achieved by sending crafted xdr handle t data in RPC packets, specifically used in calculating an address for a function call. An example of exploitation is demonstrated using the 191 (0xbf) RPC request.

Recommendations: For CA BrightStor ARCserve Backup version 11.5 SP2 build 4237, consider restricting access to the RPC service in mediasvr.exe to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-1785

Produtos afetados

Ca Brightstor Arcserve Backup

Referências · 20

• 🔥 https://exploit-db.com/exploits/3604 · Exploit
• http://securityfocus.com/bid/23209 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1785 · Nota de Segurança
• http://shirkdog.us/camediasvrremote.py · Nota
• http://shirkdog.us/shk-004.html · Nota
• http://securitytracker.com/id?1017830 · Nota
• http://securityreason.com/securityalert/2509 · Nota
• http://securityfocus.com/archive/1/archive/1/464343/100/0/threaded · Nota
• https://t.me/cvenotify/12867 · Publicação no Telegram
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33316 · Nota
• http://securityfocus.com/archive/1/464343/100/0/threaded · Nota
• http://secunia.com/advisories/24682 · Aviso do Fabricante
• http://frsirt.com/english/advisories/2007/1161 · Nota
• http://vupen.com/english/advisories/2007/1161 · Nota
• http://securityfocus.com/archive/1/archive/1/464270/100/0/threaded · Nota