The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5 and Enterprise Backup r10.5 allows remote attackers to (1) execute arbitrary code via stack-based buffer overflows in unspecified RPC procedures and (2) trigger memory corruption related to the use of \handle\ RPC arguments as pointers.