CVE-2007-0168

Published: Jan 11, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed.

Affected (4)

Products: Broadcom: Brightstor Arcserve Backup, Brightstor Enterprise Backup, Business Protection Suite

3 products

Brightstor Arcserve Backup

Brightstor Enterprise Backup

Business Protection Suite

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Broadcom Brightstor Arcserve Backup	Up to 11.5
Broadcom Brightstor Arcserve Backup	Version 9.01
Broadcom Brightstor Enterprise Backup	Version 10.5
Broadcom Business Protection Suite	Version 2.0

References (28)

http://livesploit.com/advisories/LS-20061002.pdf

Source: cve@mitre.org

http://osvdb.org/31327

Source: cve@mitre.org

http://secunia.com/advisories/23648

Source: cve@mitre.org

http://securitytracker.com/id?1017506

Source: cve@mitre.org

http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp

Source: cve@mitre.org

Patch

http://www.kb.cert.org/vuls/id/662400

Source: cve@mitre.org

US Government Resource

http://www.lssec.com/advisories/LS-20061002.pdf

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/456616/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/456637

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/456711

Source: cve@mitre.org

http://www.securityfocus.com/bid/22010

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0154

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-07-002.html

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/31442

Source: cve@mitre.org

http://livesploit.com/advisories/LS-20061002.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/31327

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23648

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017506

Source: af854a3a-2127-422b-91ae-364da2661108

http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.kb.cert.org/vuls/id/662400

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.lssec.com/advisories/LS-20061002.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/456616/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/456637

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/456711

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22010

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/0154

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.zerodayinitiative.com/advisories/ZDI-07-002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/31442

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.