CVE-2007-0816: broadcom brightstor_arcserve_backup
Vulnerability summary
CVE-2007-0816 is a medium (CVSS 5.0) vulnerability in broadcom brightstor_arcserve_backup. EPSS estimates a 11.35% chance of exploitation in the next 30 days, higher than 95.9% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 07-02-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service (service crash) via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null credentials or verifier fields.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
11.35%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 11.35% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundCA BrightStor ARCserve 11.5.2.0 - 'catirpc.dll' RPC Server Denial of Service
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Broadcom1 product
- brightstor_arcserve_backup11 | 11.1 | 11.5 | 11.5:sp1 | 11.5:sp2
1 vendor · 1 product
References
10 links- www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=35058X Refsource CONFIRM
- www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317X Refsource CONFIRM
- supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.aspX Refsource CONFIRM