CVE-2007-2139: broadcom brightstor_arcserve_backup
Vulnerability summary
CVE-2007-2139 is a high (CVSS 10.0) vulnerability in broadcom brightstor_arcserve_backup. EPSS estimates a 78.00% chance of exploitation in the next 30 days, higher than 99.5% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 25-04-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
78.00%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 78.00% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundCA BrightStor ArcServe - Media Service Stack Buffer Overflow (Metasploit)
Maturity: weaponized
CA BrightStor ArcServe Media Service Stack Buffer Overflow
exploit/windows/brightstor/mediasrv_sunrpc
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Broadcom3 products
- brightstor_arcserve_backup9.01 | 11.1 | 11.5:sp2
- business_protection_suite2.0
- server_protection_suite2
Ca2 products
2 vendors · 5 products
References
11 links- supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.aspX Refsource CONFIRM
Show all 11 references
- www.zerodayinitiative.com/advisories/ZDI-07-022.htmlX Refsource MISC