CVE-2007-0168

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 20.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-01-11 · updated 2026-06-16

Description

The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed.

Affected products

Broadcom Brightstor Arcserve Backup: through 11.5; 9.01
Broadcom Brightstor Enterprise Backup: 10.5
Broadcom Business Protection Suite: 2.0

References

http://livesploit.com/advisories/LS-20061002.pdf
http://osvdb.org/31327
http://secunia.com/advisories/23648
http://securitytracker.com/id?1017506
http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp
http://www.kb.cert.org/vuls/id/662400
http://www.lssec.com/advisories/LS-20061002.pdf
http://www.securityfocus.com/archive/1/456616/100/0/threaded
http://www.securityfocus.com/archive/1/456637
http://www.securityfocus.com/archive/1/456711
http://www.securityfocus.com/bid/22010
http://www.vupen.com/english/advisories/2007/0154

Get alerted when CVE-2007-0168 or the next vulnerability affects your stack