CVE-2007-1785: High severity CA BrightStor ARCserve Backup vulnerability
Published Mar 31, 2007
·Updated
The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdrhandlet data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf) RPC request.
Affected Software
6 affected components
CA BrightStor ARCserve Backup=11
Broadcom Brightstor Arcserve Backup=11.5-sp1
Broadcom Brightstor Arcserve Backup=11.5
Broadcom Brightstor Arcserve Backup=11.5-sp2
Broadcom Brightstor Arcserve Backup=11.1
Broadcom Brightstor Arcserve Backup=9.01
Event History
Mar 31, 2007
CVE Published
01:19 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1785?
CVE-2007-1785 is rated as a critical vulnerability, allowing remote code execution.
2
How do I fix CVE-2007-1785?
To fix CVE-2007-1785, update to a patched version of CA BrightStor ARCserve Backup, specifically a version beyond 11.5 SP2.
3
What software is affected by CVE-2007-1785?
CVE-2007-1785 affects CA BrightStor ARCserve Backup versions 11.0, 11.1, 11.5 SP1, 11.5 SP2, and 9.01.
4
Can CVE-2007-1785 be exploited remotely?
Yes, CVE-2007-1785 can be exploited remotely through crafted RPC packets.
5
What kind of attack does CVE-2007-1785 enable?
CVE-2007-1785 enables attackers to execute arbitrary code on affected systems.