CVE-2007-1785

The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf) RPC request.

CVSS v2.0

7.1 HIGHAV:N/AC:H/Au:S/C:C/I:C/A:C

EPSS

15.35% chance of exploitation in the next 30 days, 97th percentile

Published

2007-03-31

Updated

2024-08-07

Proof-of-concept exploits (1)

• shirkdog/exploits1★ · 2021-05-05

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/3604

References

• CVE Record
• NVD entry

Related

• CVE-2006-4868
• CVE-2007-0816
• CVE-2007-2772
• CVE-2007-1778
• CVE-2007-1787
• CVE-2007-1777