CVE-2007-2139

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 78%

from disclosure to weapon1154 days

Published on NVDApr 25

1st PoC+1154d

metasploitApr 25

exploitation probability

78%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/16413unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/35326 http://secunia.com/advisories/24972 http://securityreason.com/securityalert/2628 https://exchange.xforce.ibmcloud.com/vulnerabilities/33854 http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp http://www.kb.cert.org/vuls/id/979825 http://www.securityfocus.com/archive/1/466790/100/0/threaded http://www.securityfocus.com/bid/23635 http://www.securitytracker.com/id?1017952 http://www.vupen.com/english/advisories/2007/1529 http://www.zerodayinitiative.com/advisories/ZDI-07-022.html