CVE-2007-0169

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 70.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-01-11 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums (1) 0x2F and (2) 0x75 in the (a) Message Engine RPC service, or opnum (3) 0xCF in the Tape Engine service.

Affected products

Broadcom Brightstor Arcserve Backup: through 11.5; 9.01
Broadcom Brightstor Enterprise Backup: 10.5
Broadcom Business Protection Suite: 2.0

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=467
http://osvdb.org/31327
http://secunia.com/advisories/23648
http://securitytracker.com/id?1017506
http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp
http://www.kb.cert.org/vuls/id/151032
http://www.kb.cert.org/vuls/id/180336
http://www.securityfocus.com/archive/1/456618/100/0/threaded
http://www.securityfocus.com/archive/1/456619/100/0/threaded
http://www.securityfocus.com/archive/1/456711
http://www.securityfocus.com/bid/22005
http://www.securityfocus.com/bid/22006

Get alerted when CVE-2007-0169 or the next vulnerability affects your stack