CVE		CVE-2007-1447
Status		Candidate
Description		The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC procedure arguments, which result in memory corruption, a different vulnerability than CVE-2006-6076.
Severity		High
CVSS score		10
CVSS vector		(AV:R/AC:L/Au:NR/C:C/I:C/A:C/B:N)
Phase		Assigned (13.03.2007)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1447
References		BID : 22994
		CERT-VN : VU#375353
		CONFIRM : http://supportconnectw.ca.com/public/storage/infod...
		CONFIRM : http://www3.ca.com/securityadvisor/newsinfo/collat...
		FRSIRT : ADV-2007-0971
		OSVDB : 32990
		SECTRACK : 1017783
		SECUNIA : 24512
		XF : brightstor-rpc-tapeengine-code-execution(33017)
SecurityVulns:		Brightstor ArcServe Backup buffer overflow