CVE-2007-0168: High severity Broadcom Brightstor Arcserve Backup vulnerability
The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0168?
CVE-2007-0168 is classified as a critical vulnerability due to its potential to allow remote code execution.
How can I mitigate CVE-2007-0168?
Mitigation for CVE-2007-0168 includes applying available patches from Broadcom for affected versions of BrightStor ARCserve Backup and related products.
What software is affected by CVE-2007-0168?
CVE-2007-0168 affects Broadcom BrightStor ARCserve Backup versions 9.01 through 11.5, Enterprise Backup 10.5, and Business Protection Suite r2.
What type of attack does CVE-2007-0168 enable?
CVE-2007-0168 enables remote attackers to execute arbitrary code via specially crafted RPC requests.
Is CVE-2007-0168 being actively exploited?
While there have been reports of exploitation attempts, the overall active exploitation level of CVE-2007-0168 should be evaluated based on current threat intelligence.