PT-2007-4086 · Ca · Ca Brightstor Backup

Shirkdog · Publicado 2007-05-21 · Atualizado 2018-10-16 · CVE-2007-2772

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions CA BrightStor Backup version 11.5.2.0 SP2

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL dereference and application crash, via a crafted RPC packet. This is related to the caloggerd.exe and mediasvr.exe components, specifically the camt70.dll, catirpc.dll, and rwxdr.dll libraries.

Recommendations For CA BrightStor Backup version 11.5.2.0 SP2, consider restricting access to the RPC service until a patch is available to prevent potential denial of service attacks. As a temporary workaround, disabling the vulnerable components, such as caloggerd.exe and mediasvr.exe, may help minimize the risk of exploitation. However, this should be done with caution, as it may impact the functionality of the backup system. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-2772

Produtos afetados

Ca Brightstor Backup

Referências · 13

• 🔥 https://exploit-db.com/exploits/3939 · Exploit
• 🔥 https://exploit-db.com/exploits/3940 · Exploit
• http://vupen.com/english/advisories/2007/1849 · Nota
• http://secunia.com/advisories/25300 · Aviso do Fabricante
• http://osvdb.org/35327 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2772 · Nota de Segurança
• http://securitytracker.com/id?1018076 · Nota
• http://osvdb.org/35328 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34322 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34319 · Nota
• http://securityfocus.com/archive/1/468784/100/0/threaded · Nota
• http://securityreason.com/securityalert/2727 · Nota
• http://supportconnectw.ca.com/public/storage/infodocs/babmedservul-secnotice.asp · Nota