CVE-2007-2772
CVE-2007-2772 is a high-severity vulnerability in Ca Brightstor Arcserve Backup with a CVSS 2.0 base score of 7.8. Its EPSS exploit-prediction score of 12% places it in the 96th percentile, indicating an elevated likelihood of exploitation.
Key facts
- Severity: High (CVSS 2.0 base score 7.8)
- EPSS exploit prediction: 12% (96th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Ca Brightstor Arcserve Backup
- Published:
- Last modified:
Description
(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 allow remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted RPC packet.
Frequently asked questions
- What is CVE-2007-2772?
- (1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 allow remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted RPC packet.
- How severe is CVE-2007-2772?
- CVE-2007-2772 has a CVSS 2.0 base score of 7.8, rated high severity.
- Is CVE-2007-2772 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 12% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2007-2772?
- CVE-2007-2772 affects Ca Brightstor Arcserve Backup. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2007-2772?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2007-2772 published?
- CVE-2007-2772 was published on 2007-05-21 and last updated on 2026-06-16.
References
- http://osvdb.org/35327
- http://osvdb.org/35328
- http://secunia.com/advisories/25300
- http://securityreason.com/securityalert/2727
- http://supportconnectw.ca.com/public/storage/infodocs/babmedservul-secnotice.asp
- http://www.securityfocus.com/archive/1/468784/100/0/threaded
- http://www.securitytracker.com/id?1018076
- http://www.vupen.com/english/advisories/2007/1849
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34319
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34322
- https://www.exploit-db.com/exploits/3939
- https://www.exploit-db.com/exploits/3940
Affected products (1)
- cpe:2.3:a:ca:brightstor_arcserve_backup:11.5.2.0:sp2:*:*:*:*:*:*
More vulnerabilities in Ca Brightstor Arcserve Backup
- CVE-2008-3175 — Critical (CVSS 10.0): Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops…
- CVE-2008-2241 — Critical (CVSS 10.0): Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote…
- CVE-2007-5326 — Critical (CVSS 10.0): Multiple buffer overflows in (1) RPC and (2) rpcx.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and…
- CVE-2007-5329 — Critical (CVSS 10.0): Unspecified vulnerability in dbasvr in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5,…
- CVE-2007-5331 — Critical (CVSS 10.0): Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and…
- CVE-2007-2863 — Critical (CVSS 10.0): Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer…