CVE-2007-0168

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.zerodayinitiative.com/advisories/ZDI-07-002.html", "name": "http://www.zerodayinitiative.com/advisories/ZDI-07-002.html", "tags": ["Exploit"], "refsource": "MISC"}, {"url": "http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp", "name": "http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "http://livesploit.com/advisories/LS-20061002.pdf", "name": "http://livesploit.com/advisories/LS-20061002.pdf", "tags": [], "refsource": "MISC"}, {"url": "http://www.kb.cert.org/vuls/id/662400", "name": "VU#662400", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://secunia.com/advisories/23648", "name": "23648", "tags": [], "refsource": "SECUNIA"}, {"url": "http://securitytracker.com/id?1017506", "name": "1017506", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.securityfocus.com/archive/1/456637", "name": "20070111 LS-20061002 - Computer Associates BrightStor ARCserve Backup Remote Code Execution Vulnerability", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://www.securityfocus.com/archive/1/456711", "name": "20070111 [CAID 34955, 34956, 34957, 34958, 34959, 34817]: CA BrightStor ARCserve Backup Multiple Overflow Vulnerabilities", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://www.lssec.com/advisories/LS-20061002.pdf", "name": "http://www.lssec.com/advisories/LS-20061002.pdf", "tags": [], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/22010", "name": "22010", "tags": [], "refsource": "BID"}, {"url": "http://osvdb.org/31327", "name": "31327", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.vupen.com/english/advisories/2007/0154", "name": "ADV-2007-0154", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31442", "name": "brightstor-tapeengine-code-execution(31442)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/456616/100/0/threaded", "name": "20070111 ZDI-07-002: CA BrightStor ARCserve Backup Tape Engine Code Execution Vulnerability", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-0168", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2007-01-11T22:28Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:broadcom:business_protection_suite:2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "11.5"}, {"cpe23Uri": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2021-04-07T18:53Z"}