CVE-2007-2139

60Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 78%

da publicação à arma1154 dias

Publicada no NVD25 de abr.

1ª PoC+1154d

metasploit25 de abr.

probabilidade de exploração

78%top 1% das CVEs

exploração observada

nãonenhuma fonte reporta

1 exploit(s) público(s)

Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 1

exploitdbwww.exploit-db.com/exploits/16413não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Referências

http://osvdb.org/35326 http://secunia.com/advisories/24972 http://securityreason.com/securityalert/2628 https://exchange.xforce.ibmcloud.com/vulnerabilities/33854 http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp http://www.kb.cert.org/vuls/id/979825 http://www.securityfocus.com/archive/1/466790/100/0/threaded http://www.securityfocus.com/bid/23635 http://www.securitytracker.com/id?1017952 http://www.vupen.com/english/advisories/2007/1529 http://www.zerodayinitiative.com/advisories/ZDI-07-022.html