CVE-2007-2139
CA BrightStor ARCserve Backup 9.01-11.5 SP2 - Remote Code Execution via Malformed RPC Strings
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-2139.
PoCs published by Metasploit, toto, including Metasploit module exploits/windows/brightstor/mediasrv_sunrpc.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in the MediaSrv RPC service of CA BrightStor Arcserve. It leverages a crafted SUNRPC request to overflow a stack buffer and execute arbitrary code, with specific handling for NX bypass on Windows 2003.
Description
Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.
Exploits (2)
This exploit targets a stack buffer overflow in the MediaSrv RPC service of CA BrightStor Arcserve. It leverages a crafted SUNRPC request to overflow a stack buffer and execute arbitrary code, with specific handling for NX bypass on Windows 2003.
This Metasploit module exploits a stack buffer overflow in CA BrightStor ArcServe Media Service via a crafted SUNRPC request, allowing arbitrary code execution. It includes ROP chains to bypass NX on Windows 2003 and targets multiple versions of the software.