Lucene search

[email protected]CVE-2007-5327

HistoryOct 13, 2007 - 12:17 a.m.

CVE-2007-5327

2007-10-1300:17:00

CWE-119

[email protected]

web.nvd.nist.gov

ca brightstor

arcserve backup

buffer overflow

rpc interface

cve-2007-5327

nvd

security vulnerability

7.8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.91 High

EPSS

Percentile

98.8%

JSON

Stack-based buffer overflow in the RPC interface for the Message Engine (mediasvr.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a long argument in the 0x10d opnum.

CPENameOperatorVersion
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq10.5
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq11.5
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq11
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq11.1
broadcom:brightstor_arcserve_backupbroadcom brightstor arcserve backupeq9.01
broadcom:brightstor_enterprise_backupbroadcom brightstor enterprise backupeq10.5

CPE	Name	Operator	Version
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	10.5
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	11.5
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	11
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	11.1
broadcom:brightstor_arcserve_backup	broadcom brightstor arcserve backup	eq	9.01
broadcom:brightstor_enterprise_backup	broadcom brightstor enterprise backup	eq	10.5

References

ruder.cdut.net/blogview.asp?logID=231

secunia.com/advisories/27192

securityreason.com/securityalert/3218

supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp

www.fortiguardcenter.com/advisory/FGA-2007-11.html

www.securityfocus.com/archive/1/482112/100/0/threaded

www.securityfocus.com/archive/1/482121/100/0/threaded

www.securityfocus.com/bid/26015

www.securitytracker.com/id?1018805

www.vupen.com/english/advisories/2007/3470

exchange.xforce.ibmcloud.com/vulnerabilities/37064

exchange.xforce.ibmcloud.com/vulnerabilities/37065

7.8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.91 High

EPSS

Percentile

98.8%

JSON

Related for CVE-2007-5327

saint4 checkpoint_advisories1 prion1 securityvulns6 nessus1