CVE-2007-0168

2007-01-1122:28:00

[email protected]

web.nvd.nist.gov

brightstor arcserve backup

tape engine service

remote code execution

nvd

cve-2007-0168

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.956 High

EPSS

Percentile

99.4%

JSON

The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed.

Affected configurations

NVD

Node

broadcombrightstor_arcserve_backupRange≤11.5

broadcombrightstor_arcserve_backupMatch9.01

broadcombrightstor_enterprise_backupMatch10.5

broadcombusiness_protection_suiteMatch2.0

CPENameOperatorVersion
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backuple11.5
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq9.01
broadcom:brightstor_enterprise_backupbroadcom brightstor enterprise backupeq10.5
broadcom:business_protection_suitebroadcom business protection suiteeq2.0

CPE	Name	Operator	Version
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	le	11.5
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	9.01
broadcom:brightstor_enterprise_backup	broadcom brightstor enterprise backup	eq	10.5
broadcom:business_protection_suite	broadcom business protection suite	eq	2.0