Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-0449


Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted packets to TCP port (1) 1900 or (2) 2200.


Published

2007-01-23T21:28:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application broadcom brightstor_arcserve_backup_laptops_desktops 11.0 Yes
Application broadcom brightstor_arcserve_backup_laptops_desktops 11.1 Yes
Application broadcom brightstor_arcserve_backup_laptops_desktops 11.1 Yes
Application broadcom brightstor_mobile_backup r4.0 Yes
Application broadcom business_protection_suite 2.0 Yes
Application broadcom desktop_management_suite 11.0 Yes
Application broadcom desktop_management_suite 11.1 Yes
Application broadcom desktop_protection_suite 2.0 Yes

References