CVE-2007-0449

2007-01-2321:28:00

CWE-119

mitre

web.nvd.nist.gov

cve-2007-0449

buffer overflow

lgserver.exe

ca brightstor arcserve backup

remote code execution

tcp port 1900

tcp port 2200

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.972

Percentile

99.9%

JSON

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted packets to TCP port (1) 1900 or (2) 2200.

Affected configurations

Nvd

Node

broadcombrightstor_arcserve_backup_laptops_desktopsMatch11.0

broadcombrightstor_arcserve_backup_laptops_desktopsMatch11.1

broadcombrightstor_arcserve_backup_laptops_desktopsMatch11.1sp1

broadcombrightstor_mobile_backupMatchr4.0

broadcombusiness_protection_suiteMatch2.0

broadcomdesktop_management_suiteMatch11.0

broadcomdesktop_management_suiteMatch11.1

broadcomdesktop_protection_suiteMatch2.0

VendorProductVersionCPE
broadcombrightstor_arcserve_backup_laptops_desktops11.0cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.0:*:*:*:*:*:*:*
broadcombrightstor_arcserve_backup_laptops_desktops11.1cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:*:*:*:*:*:*:*
broadcombrightstor_arcserve_backup_laptops_desktops11.1cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:sp1:*:*:*:*:*:*
broadcombrightstor_mobile_backupr4.0cpe:2.3:a:broadcom:brightstor_mobile_backup:r4.0:*:*:*:*:*:*:*
broadcombusiness_protection_suite2.0cpe:2.3:a:broadcom:business_protection_suite:2.0:*:*:*:*:*:*:*
broadcomdesktop_management_suite11.0cpe:2.3:a:broadcom:desktop_management_suite:11.0:*:*:*:*:*:*:*
broadcomdesktop_management_suite11.1cpe:2.3:a:broadcom:desktop_management_suite:11.1:*:*:*:*:*:*:*
broadcomdesktop_protection_suite2.0cpe:2.3:a:broadcom:desktop_protection_suite:2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	brightstor_arcserve_backup_laptops_desktops	11.0	cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.0:::::::*
broadcom	brightstor_arcserve_backup_laptops_desktops	11.1	cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:::::::*
broadcom	brightstor_arcserve_backup_laptops_desktops	11.1	cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:sp1::::::
broadcom	brightstor_mobile_backup	r4.0	cpe:2.3:a:broadcom:brightstor_mobile_backup:r4.0:::::::*
broadcom	business_protection_suite	2.0	cpe:2.3:a:broadcom:business_protection_suite:2.0:::::::*
broadcom	desktop_management_suite	11.0	cpe:2.3:a:broadcom:desktop_management_suite:11.0:::::::*
broadcom	desktop_management_suite	11.1	cpe:2.3:a:broadcom:desktop_management_suite:11.1:::::::*
broadcom	desktop_protection_suite	2.0	cpe:2.3:a:broadcom:desktop_protection_suite:2.0:::::::*