Unscored severity · published Jul 18, 2007
CVE-2007-3825
Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat…
–
CVSS
14%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allow remote attackers to execute arbitrary code by sending certain data to unspecified RPC procedures.
Exploitation
Is it being used?
Exploit prediction (EPSS)14.0% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Alert Notification Server · Broadcom
All versions, or not specified · source: NVD
AF
Anti-virus For The Enterprise · CA
8 · source: NVD
BA
Brightstor Arcserve Backup · CA
11 · source: NVD
BA
Brightstor Arcserve Client · CA
All versions, or not specified · source: NVD
BE
Brightstor Enterprise Backup · Broadcom
10.5 · source: NVD
PS
Protection Suites · CA
r3 · source: NVD
TM
Threat Manager · CA
8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3825
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3825
Vendor Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=561
Patch
http://secunia.com/advisories/26088
Patch
http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-secnotice.asp
www.securityfocus.com
http://www.securityfocus.com/bid/24947
www.securitytracker.com
http://www.securitytracker.com/id?1018402
www.securitytracker.com
http://www.securitytracker.com/id?1018403