PRIOn knowledge basePRION:CVE-2007-0169Buffer overflow
8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.943 High
EPSS
Percentile
99.1%
Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums (1) 0x2F and (2) 0x75 in the (a) Message Engine RPC service, or opnum (3) 0xCF in the Tape Engine service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| brightstor_arcserve_backup | le | 11.5 | |
| brightstor_arcserve_backup | eq | 9.01 | |
| brightstor_enterprise_backup | eq | 10.5 | |
| business_protection_suite | eq | 2.0 |
References
labs.idefense.com/intelligence/vulnerabilities/display.php?id=467
osvdb.org/31327
secunia.com/advisories/23648
securitytracker.com/id?1017506
supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp
www.kb.cert.org/vuls/id/151032
www.kb.cert.org/vuls/id/180336
www.securityfocus.com/archive/1/456618/100/0/threaded
www.securityfocus.com/archive/1/456619/100/0/threaded
www.securityfocus.com/archive/1/456711
www.securityfocus.com/bid/22005
www.securityfocus.com/bid/22006
www.vupen.com/english/advisories/2007/0154
www.zerodayinitiative.com/advisories/ZDI-07-003.html
www.zerodayinitiative.com/advisories/ZDI-07-004.html
exchange.xforce.ibmcloud.com/vulnerabilities/31433
exchange.xforce.ibmcloud.com/vulnerabilities/31443
Related
8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.943 High
EPSS
Percentile
99.1%