CVE-2007-1785
7.5 High
AI Score
Confidence
Low
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
0.962 High
EPSS
Percentile
99.5%
The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf) RPC request.
References
archives.neohapsis.com/archives/fulldisclosure/2007-03/0467.html
secunia.com/advisories/24682
securityreason.com/securityalert/2509
supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp
www.kb.cert.org/vuls/id/151305
www.securityfocus.com/archive/1/464270/100/0/threaded
www.securityfocus.com/archive/1/464343/100/0/threaded
www.securityfocus.com/bid/23209
www.securitytracker.com/id?1017830
www.shirkdog.us/camediasvrremote.py
www.shirkdog.us/shk-004.html
www.vupen.com/english/advisories/2007/1161
exchange.xforce.ibmcloud.com/vulnerabilities/33316
Social References
More
Related
7.5 High
AI Score
Confidence
Low
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
0.962 High
EPSS
Percentile
99.5%