CVE-2007-1785

The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf) RPC request.

• http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0467.html
• http://secunia.com/advisories/24682Vendor Advisory
• http://securityreason.com/securityalert/2509
• http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp
• http://www.kb.cert.org/vuls/id/151305US Government Resource
• http://www.securityfocus.com/archive/1/464270/100/0/threaded
• http://www.securityfocus.com/archive/1/464343/100/0/threaded
• http://www.securityfocus.com/bid/23209
• http://www.securitytracker.com/id?1017830
• http://www.shirkdog.us/camediasvrremote.py
• http://www.shirkdog.us/shk-004.html
• http://www.vupen.com/english/advisories/2007/1161
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33316
• http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0467.html
• http://secunia.com/advisories/24682Vendor Advisory
• http://securityreason.com/securityalert/2509
• http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp
• http://www.kb.cert.org/vuls/id/151305US Government Resource
• http://www.securityfocus.com/archive/1/464270/100/0/threaded
• http://www.securityfocus.com/archive/1/464343/100/0/threaded
• http://www.securityfocus.com/bid/23209
• http://www.securitytracker.com/id?1017830
• http://www.shirkdog.us/camediasvrremote.py
• http://www.shirkdog.us/shk-004.html
• http://www.vupen.com/english/advisories/2007/1161
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33316

Published

Mar 31, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1779Multiple SQL injection vulnerabilities in the MySQL back-end…
• CVE-2007-1780Cross-site scripting (XSS) vulnerability in the DHT shell (o…
• CVE-2007-1781Minna De Office 1.x and 2.x does not properly restrict user …
• CVE-2007-1782CruiseWorks 1.09e and earlier does not properly restrict use…
• CVE-2007-1783Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-1784The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in …
• CVE-2007-1786SQL injection vulnerability in Hitachi Collaboration - Onlin…
• CVE-2007-1787Multiple PHP remote file inclusion vulnerabilities in lib/ti…
• CVE-2007-1788Flyspray 0.9.9, when output_buffering is disabled or "set to…
• CVE-2007-1789Flyspray 0.9.9 allows remote attackers to obtain sensitive i…
• CVE-2007-1790Multiple PHP remote file inclusion vulnerabilities in Kaqoo …
• CVE-2007-1791SQL injection vulnerability in wall.php in Picture-Engine 1.…