CA BrightStor ARCserve Backup caloggerd.exe Null Hostname Denial of Service (CVE-2007-2772)

A Null dereference vulnerability exists in the CA BrightStor ARCserve Backup caloggerd process. The vulnerability is due to insufficient data validation when parsing strings in received RPC requests. A remote unauthenticated attacker may leverage this vulnerability by sending a specially crafted...

CVE-2007-2772

CA BrightStor ARCserve Backup 11.5.2.0 SP2 is affected: caloggerd.exe (camt70.dll) and mediasvr.exe (catirpc.dll, rwxdr.dll) can be remotely triggered to crash via crafted RPC packets, due to a NULL dereference stemming from insufficient data validation in RPC request parsing. The CA advisory CPA...