NetSight
IP …
critical10.0Public exploit code

CVE-2007-2139

Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCse…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.

Affected products

VendorProductAffected versions
BroadcomBrightstor Arcserve Backup
Versions 9.01, 11.1, 11.5
BroadcomBusiness Protection Suite
Version 2.0
BroadcomServer Protection Suite
Version 2
CaBrightstor Arcserve Backup
Version 11
CaBusiness Protection Suite
Version 2.0

References