CVE-2007-1447

BrightStor ARCserve Backup < 11.5 - Remote Code Execution via Tape Engine RPC Procedure Arguments

Title source: llm

Description

The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC procedure arguments, which result in memory corruption, a different vulnerability than CVE-2006-6076.

References (9)

Core 9

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1017783

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/0971

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/33017

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24512

US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/375353

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/22994

Various Sources x_refsource_confirm

http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/32990

Various Sources x_refsource_confirm

http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp

Scores

EPSS 0.4146

EPSS Percentile 97.5%

Details

Status published

Products (1)

broadcom/brightstor_arcserve_backup < 11.5

Published Mar 16, 2007

Tracked Since Feb 18, 2026