Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/B…

Published 19 y ago 2007-01-11 · modified 4 mo ago 2026-06-16 · JSON

CVSS

7.5

v2.0 · NVD

CISA KEV

not known exploited

EPSS

70.7%

percentile 99%

Public exploits

Metasploit · Exploit-DB

Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums (1) 0x2F and (2) 0x75 in the (a) Message Engine RPC service, or opnum (3) 0xCF in the Tape Engine service.

Exploit prediction (EPSS)

70.69% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

Metasploit exploit/windows/brightstor/message_engine CA BrightStor ARCserve Message Engine Buffer Overflow · metasploit exploit, average rank · 2007-01-11
EDB-16418 CA BrightStor ARCserve - Message Engine Buffer Overflow (Metasploit) · remote · 2010-04-30

CVSS scores

Assigned by	Version	Score	Vector
NVD	2.0	7.5	`AV:N/AC:L/Au:N/C:P/I:P/A:P`

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

securityfocus.com /archive/1/456619/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
supportconnectw.ca.com /public/storage/infodocs/babimpsec-notice.asp · x_refsource_CONFIRM, x_transferred
exchange.xforce.ibmcloud.com /vulnerabilities/31443 · vdb-entry, x_refsource_XF, x_transferred
zerodayinitiative.com /advisories/ZDI-07-004.html · x_refsource_MISC, x_transferred
securitytracker.com /id?1017506 · vdb-entry, x_refsource_SECTRACK, x_transferred
securityfocus.com /bid/22006 · vdb-entry, x_refsource_BID, x_transferred
securityfocus.com /bid/22005 · vdb-entry, x_refsource_BID, x_transferred
securityfocus.com /archive/1/456711 · mailing-list, x_refsource_BUGTRAQ, x_transferred
securityfocus.com /archive/1/456618/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
labs.idefense.com /intelligence/vulnerabilities/display.php?id=467 · third-party-advisory, x_refsource_IDEFENSE, x_transferred
vupen.com /english/advisories/2007/0154 · vdb-entry, x_refsource_VUPEN, x_transferred
osvdb.org /31327 · vdb-entry, x_refsource_OSVDB, x_transferred
kb.cert.org /vuls/id/151032 · third-party-advisory, x_refsource_CERT-VN, x_transferred
kb.cert.org /vuls/id/180336 · third-party-advisory, x_refsource_CERT-VN, x_transferred
zerodayinitiative.com /advisories/ZDI-07-003.html · x_refsource_MISC, x_transferred
exchange.xforce.ibmcloud.com /vulnerabilities/31433 · vdb-entry, x_refsource_XF, x_transferred
secunia.com /advisories/23648 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

CVE List: CVE-2007-0169
NVD: CVE-2007-0169

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.