PT-2007-3139 · Ca · Ca Brightstor Arcserve Backup

Published 2007-03-30 · Updated 2021-04-07 · CVE-2007-1785

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: CA BrightStor ARCserve Backup version 11.5 SP2 build 4237

Description: The issue concerns the RPC service in mediasvr.exe, which allows remote attackers to execute arbitrary code. This is achieved by sending crafted xdr handle t data in RPC packets, specifically used in calculating an address for a function call. An example of exploitation is demonstrated using the 191 (0xbf) RPC request.

Recommendations: For CA BrightStor ARCserve Backup version 11.5 SP2 build 4237, consider restricting access to the RPC service in mediasvr.exe to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-1785

Affected Products

Ca Brightstor Arcserve Backup

References · 20

• 🔥 https://exploit-db.com/exploits/3604 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1785 · Security Note
• http://secunia.com/advisories/24682 · Vendor Advisory
• http://securityfocus.com/bid/23209 · Note
• http://shirkdog.us/camediasvrremote.py · Note
• http://shirkdog.us/shk-004.html · Note
• http://securitytracker.com/id?1017830 · Note
• http://securityreason.com/securityalert/2509 · Note
• http://securityfocus.com/archive/1/archive/1/464343/100/0/threaded · Note
• https://t.me/cvenotify/12867 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33316 · Note
• http://securityfocus.com/archive/1/464343/100/0/threaded · Note
• http://frsirt.com/english/advisories/2007/1161 · Note
• http://vupen.com/english/advisories/2007/1161 · Note
• http://securityfocus.com/archive/1/archive/1/464270/100/0/threaded · Note