CVE-2007-2139

Broadcom Brightstor Arcserve Backup - Buffer Overflow

Title source: rule

Description

Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16413

View Code ZIP pw:eip

metasploit WORKING POC NORMAL

by toto · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/mediasrv_sunrpc.rb

View Code ZIP pw:eip

References (11)

[Various Sources] http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp

[Third Party Advisory] http://securityreason.com/securityalert/2628

[US Government Resource] http://www.kb.cert.org/vuls/id/979825

[Third Party Advisory, VDB Entry] http://osvdb.org/35326

[Third Party Advisory] http://secunia.com/advisories/24972

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/33854

[Patch] http://www.securityfocus.com/bid/23635

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/466790/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1017952

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/1529

[Third Party Advisory] http://www.zerodayinitiative.com/advisories/ZDI-07-022.html

Scores

EPSS 0.8467

EPSS Percentile 99.3%

Details

Status published

Products (7)

broadcom/brightstor_arcserve_backup 9.01

broadcom/brightstor_arcserve_backup 11.1

broadcom/brightstor_arcserve_backup 11.5 sp2

broadcom/business_protection_suite 2.0

broadcom/server_protection_suite 2

ca/brightstor_arcserve_backup 11

ca/business_protection_suite 2.0 (2 CPE variants)

Published Apr 25, 2007

Tracked Since Feb 18, 2026