CVE-2007-0816: Broadcom Brightstor Arcserve Backup

Medium severity, CVSS 5.0. EPSS: 11.4% chance of exploitation in the next 30 days.

The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earlier allows remote attackers to cause a denial of service (service crash) via a crafted TADDR2UADDR that triggers a null pointer dereference in catirpc.dll, possibly related to null credentials or verifier fields.

Affected products

• Broadcom Brightstor Arcserve Backup: version 11 only; version 11.1 only; version 11.5 only

Published 2007-02-07. Last modified 2026-06-16.