CVE:CVE-2007-0168
CNNVD:CNNVD-200701-143
BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。
BrightStor ARCserve Backup在处理TCP/6502端口上请求时存在漏洞，远程攻击者可能利用此漏洞控制服务器。默认监听于TCP 6502端口的BrightStor ARCserve Backup的Tape Engine服务(tapeeng.exe)没有正确的处理RPC请求。在62b93df0-8b02-11ce-876c-00805f842837接口上Opnum 191指定了有漏洞的操作，允许通过控制栈上的变量重新定向代码，然后在以下调用中滥用了该变量：00264DFE CALL DWORD PTR DS:[EAX+C] ;EAX is controllable.成功利用这个漏洞的攻击者可以在有漏洞的系统上执行任意代码。
solution:Upgrade broadcom brightstor_arcserve_backup to a higher version than 11.5,9.01,and avoid the version (,11.5],9.01; Upgrade broadcom brightstor_enterprise_backup to a higher version than 10.5,and avoid the version 10.5; Upgrade broadcom business_protection_suite to a higher version than 2.0,and avoid the version 2.0