PT-2007-4086 · Ca · Ca Brightstor Backup

Shirkdog · Published 2007-05-21 · Updated 2018-10-16 · CVE-2007-2772

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions CA BrightStor Backup version 11.5.2.0 SP2

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL dereference and application crash, via a crafted RPC packet. This is related to the caloggerd.exe and mediasvr.exe components, specifically the camt70.dll, catirpc.dll, and rwxdr.dll libraries.

Recommendations For CA BrightStor Backup version 11.5.2.0 SP2, consider restricting access to the RPC service until a patch is available to prevent potential denial of service attacks. As a temporary workaround, disabling the vulnerable components, such as caloggerd.exe and mediasvr.exe, may help minimize the risk of exploitation. However, this should be done with caution, as it may impact the functionality of the backup system. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-2772

Affected Products

Ca Brightstor Backup

References · 13

• 🔥 https://exploit-db.com/exploits/3939 · Exploit
• 🔥 https://exploit-db.com/exploits/3940 · Exploit
• http://secunia.com/advisories/25300 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2772 · Security Note
• http://vupen.com/english/advisories/2007/1849 · Note
• http://osvdb.org/35327 · Note
• http://securitytracker.com/id?1018076 · Note
• http://osvdb.org/35328 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34322 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34319 · Note
• http://securityfocus.com/archive/1/468784/100/0/threaded · Note
• http://securityreason.com/securityalert/2727 · Note
• http://supportconnectw.ca.com/public/storage/infodocs/babmedservul-secnotice.asp · Note