PT-2007-3481 · Broadcom+1 · Ca Brightstor Arcserve Backup+2

Published 2007-04-25 · Updated 2021-04-09 · CVE-2007-2139

Mitre

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.

Exploit

Fix

Related Identifiers

CVE-2007-2139

Affected Products

Ca Brightstor Arcserve Backup

Ca Business Protection Suite

Ca Server Protection Suite

References · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/mediasrv_sunrpc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16413 · Exploit
• http://securityfocus.com/bid/23635 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-2139 · Security Note
• https://t.me/cvenotify/12867 · Telegram Post
• http://vupen.com/english/advisories/2007/1529 · Note
• http://secunia.com/advisories/24972 · Note
• http://kb.cert.org/vuls/id/979825 · Note
• http://securityfocus.com/archive/1/466790/100/0/threaded · Note
• http://osvdb.org/35326 · Note
• http://zerodayinitiative.com/advisories/ZDI-07-022.html · Note
• http://securitytracker.com/id?1017952 · Note
• http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp · Note
• http://securityreason.com/securityalert/2628 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33854 · Note