CVE-2007-0168: Broadcom Brightstor Arcserve Backup

High severity, CVSS 7.5. EPSS: 20.4% chance of exploitation in the next 30 days.

The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute arbitrary code via certain data in opnum 0xBF in an RPC request, which is directly executed.

Affected products

• Broadcom Brightstor Arcserve Backup: up to and including 11.5; version 9.01 only
• Broadcom Brightstor Enterprise Backup: version 10.5 only
• Broadcom Business Protection Suite: version 2.0 only

Published 2007-01-11. Last modified 2026-06-16.