$ cve CVE-2007-2139 JSON

CVE-2007-2139 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 78% (pctl 100)

Patch early

A public exploit exists.

Description

Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.

Scoring

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	78% — more likely to be exploited than 100% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2007-04-25
Last modified	2026-06-16

Affected (5)

Vendor	Product
broadcom	brightstor arcserve backup
broadcom	business protection suite
broadcom	server protection suite
ca	brightstor arcserve backup
ca	business protection suite

Public exploits

Source	Title	Date
exploit-db	CA BrightStor ArcServe - Media Service Stack Buffer Overflow (Metasploit)	2010-06-22

References

→ the Explorer · watch your stack · NVD