CVE-2007-1447

The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and…

published March 16, 2007

CVSS
—
EPSS
15%
Percentile
96.6
In the wild
Unconfirmed
What it is

⚠️ A mischief-making RPC argument can turn your backup system into a digital ghost town! Think of it like a restaurant where a rogue customer orders an item that doesn’t exist, causing the kitchen to shut down—no more food service until it’s resolved! An attacker could exploit this vulnerability to crash your ARCserve backup system, leading to downtime that could jeopardize important data availability. In a worst-case scenario, they might even execute arbitrary code, making this an all-around headache.

Put simply

Think of it like a restaurant where a rogue customer orders an item that doesn’t exist, causing the kitchen to shut down—no more food service until it’s resolved! This vulnerability in CA BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service through corrupted memory manipulation via specific RPC procedure arguments.

What to do

An attacker could exploit this vulnerability to crash your ARCserve backup system, leading to downtime that could jeopardize important data availability. In a worst-case scenario, they might even execute arbitrary code, making this an all-around headache. To protect your systems, consider upgrading to a newer version of ARCserve that addresses this vulnerability. Additionally, ensure that your firewall settings block unauthorized RPC calls and regularly audit your backup configurations. 🛡️ You’ve got this! 🦸 Stay proactive and secure your backup systems.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14571 · 96.6th percentile
Published
2007-03-16T23:00Z
EPSS history
Timeline
  • 16 MAR 23:00Z
    The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and…
    cvelistv5