CVE-2007-5003 Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long (1...
HighCVSS 10.0
EPSS 67.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long (1) username or (2) password to the rxrLogin command in rxRPC.dll, or a long (3) username argument to the GetUserInfo function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom brightstor arcserve backup laptops desktops | = 4.0 | No fix listed |
| broadcom brightstor arcserve backup laptops desktops | = 11.0 | No fix listed |
| broadcom brightstor arcserve backup laptops desktops | = 11.1 | No fix listed |
| broadcom brightstor arcserve backup laptops desktops | = 11.1-sp1 | No fix listed |
| broadcom brightstor arcserve backup laptops desktops | = 11.5 | No fix listed |
| broadcom desktop management suite | = 11.0 | No fix listed |
| broadcom desktop management suite | = 11.1 | No fix listed |
| broadcom desktop management suite | = 11.2 | No fix listed |
| ca protection suites | = r2 | No fix listed |
References
- 20070920 CA ARCServe Backup for Laptops and Desktops Multiple Buffer Overflow Vulnerabilities third-party-advisory
- 20070920 Multiple Vulnerabilities in CA ARCserve for Laptops & Desktops third-party-advisory
- 25606 third-party-advisory vendor-advisory
- supportconnectw.ca.com patch
- www.ca.com patch
- www.ca.com patch
- 20070921 [CAID 35673, 35674, 35675, 35676, 35677]: CA ARCserve Backup for Laptops and Desktops Multiple Server Vulnerabilities mailing-list
- 24348 vdb-entry
- 1018728 vdb-entry