PT-2007-3481 · Broadcom+1 · Ca Brightstor Arcserve Backup+2

Publicado 2007-04-25 · Atualizado 2021-04-09 · CVE-2007-2139

Mitre

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.

Exploit

Correção

Identificadores relacionados

CVE-2007-2139

Produtos afetados

Ca Brightstor Arcserve Backup

Ca Business Protection Suite

Ca Server Protection Suite

Referências · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/mediasrv_sunrpc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16413 · Exploit
• https://t.me/cvenotify/12867 · Publicação no Telegram
• http://securityfocus.com/bid/23635 · Correção
• http://vupen.com/english/advisories/2007/1529 · Nota
• http://secunia.com/advisories/24972 · Nota
• http://kb.cert.org/vuls/id/979825 · Nota
• http://securityfocus.com/archive/1/466790/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2139 · Nota de Segurança
• http://osvdb.org/35326 · Nota
• http://zerodayinitiative.com/advisories/ZDI-07-022.html · Nota
• http://securitytracker.com/id?1017952 · Nota
• http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp · Nota
• http://securityreason.com/securityalert/2628 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33854 · Nota