CVE-2007-0449 Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop M...
HighCVSS 10.0
EPSS 79.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted packets to TCP port (1) 1900 or (2) 2200.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom brightstor arcserve backup laptops desktops | = 11.0 | No fix listed |
| broadcom brightstor arcserve backup laptops desktops | = 11.1 | No fix listed |
| broadcom brightstor arcserve backup laptops desktops | = 11.1-sp1 | No fix listed |
| broadcom brightstor mobile backup | = r4.0 | No fix listed |
| broadcom business protection suite | = 2.0 | No fix listed |
| broadcom desktop management suite | = 11.0 | No fix listed |
| broadcom desktop management suite | = 11.1 | No fix listed |
| broadcom desktop protection suite | = 2.0 | No fix listed |
References
- 23897 patch third-party-advisory vendor-advisory
- 1017548 vdb-entry
- supportconnectw.ca.com patch
- VU#357308 third-party-advisory us-government-resource
- VU#611276 third-party-advisory us-government-resource
- 31593 vdb-entry
- 20070124 [CAID 34993]: CA BrightStor ARCserve Backup for Laptops and Desktops Multiple Overflow Vulnerabilities mailing-list
- 20070131 Remote Unauthenticated Code Execution CA BrightStor ARCserve Backup mailing-list
- 20070131 Remote Unauthenticated Code Execution II CA BrightStor ARCserve Backup for Laptops & Desktops mailing-list
- 22199 vdb-entry
- 22340 vdb-entry
- 22342 vdb-entry
- ADV-2007-0314 vdb-entry vendor-advisory
- www3.ca.com
- www3.ca.com
- ca-multiple-unspecified-bo(31704) vdb-entry