Unscored severity · published Jan 23, 2007
CVE-2007-0449
Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection…
–
CVSS
79.8%
EPSS
No
On KEV
Description
Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted packets to TCP port (1) 1900 or (2) 2200.
Exploitation
Is it being used?
Exploit prediction (EPSS)79.8% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Brightstor Arcserve Backup Laptops Desktops · Broadcom
11.0; 11.1; 11.1 · source: NVD
BM
Brightstor Mobile Backup · Broadcom
r4.0 · source: NVD
BP
Business Protection Suite · Broadcom
2.0 · source: NVD
DM
Desktop Management Suite · Broadcom
11.0; 11.1 · source: NVD
DP
Desktop Protection Suite · Broadcom
2.0 · source: NVD
Affected product
BA
Brightstor Arcserve Backup Laptops Desktops
Broadcom
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0449
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0449
Patch
http://secunia.com/advisories/23897
securitytracker.com
http://securitytracker.com/id?1017548
Patch
http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp
US Government Resource
http://www.kb.cert.org/vuls/id/357308
US Government Resource
http://www.kb.cert.org/vuls/id/611276
www.osvdb.org
http://www.osvdb.org/31593
More from Brightstor Arcserve Backup Laptops Desktops
–
CVE-2007-5003
Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute…
–
CVE-2007-5005
Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to…
–
CVE-2007-5004
Integer overflow in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long…
–
CVE-2007-5006
Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which…
–
CVE-2007-3216
Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute…