| ID |
CVE-2007-0816
|
| Summary |
The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service (service crash) via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null credentials or verifier fields. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11:*:*:*:*:*:*:*
-
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*
-
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*
-
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:sp1:*:*:*:*:*:*
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:sp1:*:*:*:*:*:*
-
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:sp2:*:*:*:*:*:*
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:sp2:*:*:*:*:*:*
|
| CVSS |
| Base: | 5.0 (as of 07-04-2021 - 18:14) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
| refmap
via4
|
| bid | 22365 | | confirm | | | exploit-db | 3248 | | osvdb | 32989 | | secunia | | | vupen | ADV-2007-0461 | | xf | brightstor-catirpc-dos(32137) |
|
| Last major update |
07-04-2021 - 18:14 |
| Published |
07-02-2007 - 11:28 |
| Last modified |
07-04-2021 - 18:14 |
