Published: 31/03/2007 Updated: 07/04/2021

CVSS v2 Base Score: 7.1 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 715

Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C

The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote malicious users to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf) RPC request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ca brightstor arcserve backup 11
broadcom brightstor arcserve backup 9.01
broadcom brightstor arcserve backup 11.5
broadcom brightstor arcserve backup 11.1

#!/usr/bin/python # # Computer Associates (CA) Brightstor Backup Mediasvrexe Remote Code Exploit # (Previously Unknown) # # There seems to be an design error in the handling of RPC data with xdr procedures # across several dll's imported by Mediasvrexe Four bytes from an RPC packet are # processed as a particular address (xdr_handle_t data whic ...

Exploit code

Exploits and Shellcode Exploit code by year/CVE 2006/CVE-2006-4868/vmlDoShtml 2007/CVE-2007-0816/catirpcdosrb 2007/CVE-2007-1785/camediasvrremotepy 2007/CVE-2007-2772/caloggerdospy 2007/CVE-2007-2772/camediasvrdospy Shellcode (by OS)

NVD-CWE-Other http://www.shirkdog.us/camediasvrremote.py http://www.shirkdog.us/shk-004.html http://www.securityfocus.com/bid/23209 http://secunia.com/advisories/24682 http://www.kb.cert.org/vuls/id/151305 http://www.securitytracker.com/id?1017830 http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp http://securityreason.com/securityalert/2509 http://www.vupen.com/english/advisories/2007/1161 http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0467.html https://exchange.xforce.ibmcloud.com/vulnerabilities/33316 http://www.securityfocus.com/archive/1/464343/100/0/threaded http://www.securityfocus.com/archive/1/464270/100/0/threaded https://nvd.nist.gov https://github.com/shirkdog/exploits https://www.exploit-db.com/exploits/3604/https://www.kb.cert.org/vuls/id/151305

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-1785

Vulnerability Summary

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect