CVE-2007-2139
Status: ModifiedHigh (10)—
Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Base score: 10
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 78%
- Percentile among all scored CVEs: 100
- Score date: 10/3/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (5)
CWEs
- NVD-CWE-Other
References
- http://osvdb.org/35326
- http://secunia.com/advisories/24972
- http://securityreason.com/securityalert/2628
- http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp
- http://www.kb.cert.org/vuls/id/979825
- http://www.securityfocus.com/archive/1/466790/100/0/threaded
- http://www.securityfocus.com/bid/23635
- http://www.securitytracker.com/id?1017952
- http://www.vupen.com/english/advisories/2007/1529
- http://www.zerodayinitiative.com/advisories/ZDI-07-022.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33854
- http://osvdb.org/35326
- http://secunia.com/advisories/24972
- http://securityreason.com/securityalert/2628
- http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp
- http://www.kb.cert.org/vuls/id/979825
- http://www.securityfocus.com/archive/1/466790/100/0/threaded
- http://www.securityfocus.com/bid/23635
- http://www.securitytracker.com/id?1017952
- http://www.vupen.com/english/advisories/2007/1529
- http://www.zerodayinitiative.com/advisories/ZDI-07-022.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33854
Raw JSON (NVD)
Show
{
"id": "CVE-2007-2139",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": true,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2007-04-25T20:19:00.000",
"references": [
{
"url": "http://osvdb.org/35326",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/24972",
"source": "cve@mitre.org"
},
{
"url": "http://securityreason.com/securityalert/2628",
"source": "cve@mitre.org"
},
{
"url": "http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp",
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/979825",
"tags": [
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/466790/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/23635",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1017952",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2007/1529",
"source": "cve@mitre.org"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-07-022.html",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33854",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/35326",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/24972",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securityreason.com/securityalert/2628",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://supportconnectw.ca.com/public/storage/infodocs/babmedser-secnotice.asp",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/979825",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/466790/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/23635",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1017952",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2007/1529",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-07-022.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33854",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785."
},
{
"lang": "es",
"value": "Múltiple desbordamiento de búfer basado en pila en el servicio SUN RPC del CA (antiguamente Computer Associates) BrightStor ARCserve Media Server, como el utilizado en el BrightStor ARCserve Backup 9.01 hasta la 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2 y Business Protection Suite 2, permite a atacantes remotos ejecutar código de su elección a través de cadenas RPC mal formadas. Vulnerabilidad diferente a las CVE-2006-5171, CVE-2006-5172 y CVE-2007-1785."
}
],
"lastModified": "2026-06-16T22:39:00.827",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F52790F8-0D23-47F4-B7F7-6CB0F7B6EA14"
},
{
"criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E37161BE-6AF5-40E0-BD63-2C17431D8B36"
},
{
"criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C689BA77-8B88-4742-9AF1-567E12B92E17"
},
{
"criteria": "cpe:2.3:a:broadcom:business_protection_suite:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "328E1C42-488A-43FC-8DF2-758DC73B74AF"
},
{
"criteria": "cpe:2.3:a:broadcom:server_protection_suite:2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8781759-7B4C-47C3-8A60-8CA5520360C5"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup:11:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E236148-4A57-4FDC-A072-A77D3DD2DB53"
},
{
"criteria": "cpe:2.3:a:ca:business_protection_suite:2.0:*:microsoft_sbs_premium:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2429EE00-5359-4C47-A634-8DBC57253266"
},
{
"criteria": "cpe:2.3:a:ca:business_protection_suite:2.0:*:microsoft_sbs_standard:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F33EE596-0901-4A13-BAA1-1A7C7C16AD27"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}