PT-2007-1653 · Computer Associates · Ca Brightstor Arcserve Backup+2

Published 2007-01-11 · Updated 2021-04-07 · CVE-2007-0169

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Computer Associates (CA) BrightStor ARCserve Backup versions 9.01 through 11.5 Computer Associates (CA) Enterprise Backup version 10.5 Computer Associates (CA) Server/Business Protection Suite version r2

Description The issue allows remote attackers to execute arbitrary code via RPC requests with crafted data for specific opnums in the Message Engine RPC service or the Tape Engine service. Specifically, the opnums affected are 0x2F, 0x75 in the Message Engine RPC service, and 0xCF in the Tape Engine service.

Recommendations For Computer Associates (CA) BrightStor ARCserve Backup versions 9.01 through 11.5, update to a version outside of this range to mitigate the risk. For Computer Associates (CA) Enterprise Backup version 10.5, update to a version outside of this range to mitigate the risk. For Computer Associates (CA) Server/Business Protection Suite version r2, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to the Message Engine RPC service and the Tape Engine service to minimize the risk of exploitation.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-0169

Affected Products

Ca Brightstor Arcserve Backup

Ca Enterprise Backup

Ca Server/Business Protection Suite

References · 26

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/message_engine.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16418 · Exploit
• 🔥 http://zerodayinitiative.com/advisories/ZDI-07-004.html · Exploit
• 🔥 http://zerodayinitiative.com/advisories/ZDI-07-003.html · Exploit
• http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp · Patch
• http://vupen.com/english/advisories/2007/0154 · Vendor Advisory
• http://secunia.com/advisories/23648 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0169 · Security Note
• http://securityfocus.com/archive/1/archive/1/456618/100/0/threaded · Note
• http://xforce.iss.net/xforce/xfdb/31443 · Note
• http://securityfocus.com/bid/22005 · Note
• http://securitytracker.com/id?1017506 · Note
• http://securityfocus.com/archive/1/456618/100/0/threaded · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=467 · Note
• https://t.me/cvenotify/12866 · Telegram Post