← volver
CVE-2007-3216

CVE-2007-3216

50Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 59%
de la publicación al arma1238 días
Publicada en NVD14 jun
1ª PoC+1238d
metasploit6 jun
probabilidad de explotación
59%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
3 exploit(s) público(s)
Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute arbitrary code via crafted arguments to the (1) rxsAddNewUser, (2) rxsSetUserInfo, (3) rxsRenameUser, (4) rxsSetMessageLogSettings, (5) rxsExportData, (6) rxsSetServerOptions, (7) rxsRenameFile, (8) rxsACIManageSend, (9) rxsExportUser, (10) rxsImportUser, (11) rxsMoveUserData, (12) rxsUseLicenseIni, (13) rxsLicGetSiteId, (14) rxsGetLogFileNames, (15) rxsGetBackupLog, (16) rxsBackupComplete, (17) rxsSetDataProtectionSecurityData, (18) rxsSetDefaultConfigName, (19) rxsGetMessageLogSettings, (20) rxsHWDiskGetTotal, (21) rxsHWDiskGetFree, (22) rxsGetSubDirs, (23) rxsGetServerDBPathName, (24) rxsSetServerOptions, (25) rxsDeleteFile, (26) rxsACIManageSend, (27) rxcReadBackupSetList, (28) rxcWriteConfigInfo, (29) rxcSetAssetManagement, (30) rxcWriteFileListForRestore, (31) rxcReadSaveSetProfile, (32) rxcInitSaveSetProfile, (33) rxcAddSaveSetNextAppList, (34) rxcAddSaveSetNextFilesPathList, (35) rxcAddNextBackupSetIncWildCard, (36) rxcGetRevisions, (37) rxrAddMovedUser, (38) rxrSetClientVersion, or (39) rxsSetDataGrowthScheduleAndFilter commands.
Productos afectados
n/a · n/a
PoCs públicas encontradas — 3
exploitdbwww.exploit-db.com/exploits/16415no verificadoexploitdbwww.exploit-db.com/exploits/16416no verificadoexploitdbwww.exploit-db.com/exploits/16409no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=599http://osvdb.org/35329http://research.eeye.com/html/advisories/published/AD20070920.htmlhttp://research.eeye.com/html/advisories/upcoming/20070604.htmlhttp://secunia.com/advisories/25606https://exchange.xforce.ibmcloud.com/vulnerabilities/34805http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/bsabld-securitynotice.asphttp://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asphttp://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35673http://www.securityfocus.com/archive/1/480252/100/100/threadedhttp://www.securityfocus.com/bid/24348