CVE-2007-5327
high · 10Stack-based buffer overflow in the RPC interface for the Message Engine (mediasvr.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a long argument in the 0x10d opnum.
10
CVSS
16.1%
EPSS (exploit prob.)
97th
EPSS percentile
2007-10-13
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| broadcom | brightstor_arcserve_backup | 9.01 |
| broadcom | brightstor_arcserve_backup | 10.5 |
| broadcom | brightstor_arcserve_backup | 11 |
| broadcom | brightstor_arcserve_backup | 11.1 |
| broadcom | brightstor_arcserve_backup | 11.5 |
| broadcom | brightstor_enterprise_backup | 10.5 |
Check a specific version with /api/v1/cve/match.
References
- http://ruder.cdut.net/blogview.asp?logID=231
- http://secunia.com/advisories/27192
- http://securityreason.com/securityalert/3218
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp
- http://www.fortiguardcenter.com/advisory/FGA-2007-11.html
- http://www.securityfocus.com/archive/1/482112/100/0/threaded
- http://www.securityfocus.com/archive/1/482121/100/0/threaded
- http://www.securityfocus.com/bid/26015
- http://www.securitytracker.com/id?1018805
- http://www.vupen.com/english/advisories/2007/3470
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37064
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37065
- http://ruder.cdut.net/blogview.asp?logID=231
- http://secunia.com/advisories/27192
- http://securityreason.com/securityalert/3218
- http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp
- http://www.fortiguardcenter.com/advisory/FGA-2007-11.html
- http://www.securityfocus.com/archive/1/482112/100/0/threaded
- http://www.securityfocus.com/archive/1/482121/100/0/threaded
- http://www.securityfocus.com/bid/26015
- http://www.securitytracker.com/id?1018805
- http://www.vupen.com/english/advisories/2007/3470
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37064
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37065
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-5327