CVE-2007-3825 Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterpri...
HighCVSS 9.3
EPSS 14.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allow remote attackers to execute arbitrary code by sending certain data to unspecified RPC procedures.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom alert notification server | All versions | No fix listed |
| broadcom brightstor arcserve backup | = 9.01 | No fix listed |
| broadcom brightstor arcserve backup | = 11.1 | No fix listed |
| broadcom brightstor arcserve backup | = 11.5 | No fix listed |
| broadcom brightstor enterprise backup | = 10.5 | No fix listed |
| ca anti-virus for the enterprise | = 8 | No fix listed |
| ca brightstor arcserve backup | = 11 | No fix listed |
| ca brightstor arcserve client | All versions | No fix listed |
| ca protection suites | = r3 | No fix listed |
| ca threat manager | = 8 | No fix listed |
References
- 20070717 Computer Associates Alert Notification Server Multiple Buffer Overflow Vulnerabilities third-party-advisory vendor-advisory
- 26088 patch third-party-advisory vendor-advisory
- supportconnectw.ca.com patch
- 24947 vdb-entry
- 1018402 vdb-entry
- 1018403 vdb-entry
- 1018404 vdb-entry
- 1018405 vdb-entry
- 1018406 vdb-entry
- ADV-2007-2559 vdb-entry
- ca-alertnotification-bo(35467) vdb-entry