← Vulnerability feed

Vulnerability record · CVE-2007-2772 · published 21 May 2007

CVE-2007-2772: Ca brightstor arcserve backup vulnerability

CCa · Brightstor Arcserve Backup

(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 allow remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted RPC packet.

7.8 CVSS 2.0 High EPSS 12% · top 4.0%
7.8CVSS 2.0 base score
12%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
24References
16 Jun 2026Last modified by NVD

Description

(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 allow remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted RPC packet.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/35327
http://osvdb.org/35328
http://secunia.com/advisories/25300 Vendor Advisory
http://securityreason.com/securityalert/2727
http://supportconnectw.ca.com/public/storage/infodocs/babmedservul-secnotice.asp
http://www.securityfocus.com/archive/1/468784/100/0/threaded
http://www.securitytracker.com/id?1018076
http://www.vupen.com/english/advisories/2007/1849
https://exchange.xforce.ibmcloud.com/vulnerabilities/34319
https://exchange.xforce.ibmcloud.com/vulnerabilities/34322
https://www.exploit-db.com/exploits/3939
https://www.exploit-db.com/exploits/3940
http://osvdb.org/35327
http://osvdb.org/35328
http://secunia.com/advisories/25300 Vendor Advisory
http://securityreason.com/securityalert/2727
http://supportconnectw.ca.com/public/storage/infodocs/babmedservul-secnotice.asp
http://www.securityfocus.com/archive/1/468784/100/0/threaded
http://www.securitytracker.com/id?1018076
http://www.vupen.com/english/advisories/2007/1849
https://exchange.xforce.ibmcloud.com/vulnerabilities/34319
https://exchange.xforce.ibmcloud.com/vulnerabilities/34322
https://www.exploit-db.com/exploits/3939
https://www.exploit-db.com/exploits/3940

Track CVE-2007-2772 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-3175Broadcom brightstor arcserve backup vulnerabilityInteger underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote a…EPSS 14%10.0CVE-2008-2241Broadcom brightstor arcserve backup path traversal vulnerabilityDirectory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data…EPSS 12%10.0CVE-2007-5326Broadcom brightstor arcserve backup memory buffer overflow vulnerabilityMultiple buffer overflows in (1) RPC and (2) rpcx.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote…EPSS 12%10.0CVE-2007-5329Broadcom brightstor arcserve backup vulnerabilityUnspecified vulnerability in dbasvr in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, has unknown impact and attack …EPSS 2.2%10.0CVE-2007-5331Broadcom brightstor arcserve backup code injection vulnerabilityQueue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows re…EPSS 9.9%10.0CVE-2007-2863Broadcom anti-virus for the enterprise vulnerabilityStack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote …EPSS 23%10.0CVE-2007-2139CA BrightStor ARCserve Media Server SUN RPC stack buffer overflowThe SUN RPC service in CA BrightStor ARCserve Media Server contains multiple stack-based buffer overflows triggered by malformed RPC strings. The fla…EPSS 78%analysed10.0CVE-2006-6076CA BrightStor ARCserve Backup Tape Engine RPC buffer overflowThe Tape Engine (tapeeng.exe) in CA BrightStor ARCserve Backup 11.5 and earlier contains a buffer overflow reachable through certain RPC requests to …EPSS 71%analysed

Source: NIST National Vulnerability Database (record CVE-2007-2772), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.