vulnwire
10.0crit

CVE-2007-0449in critical feed5 exploits

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
79.8%
percentile 100%
Public exploits
5
Metasploit · Exploit-DB

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted packets to TCP port (1) 1900 or (2) 2200.

Exploit prediction (EPSS)

79.80% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

  • Metasploit exploit/windows/brightstor/lgserver CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow · metasploit exploit, average rank · 2007-01-31
  • EDB-3244 CA BrightStor ARCserve - 'lgserver.exe' Remote Stack Overflow · remote · 2007-02-01
  • EDB-3218 CA BrightStor ARCserve - 'msgeng.exe' Remote Heap Overflow (2) · remote · 2007-01-28
  • EDB-3211 CA BrightStor ARCserve - 'msgeng.exe' Remote Heap Overflow (1) · remote · 2007-01-27
  • EDB-16400 CA BrightStor ARCserve for Laptops & Desktops LGServer - Remote Buffer Overflow (Metasploit) (1) · remote · 2010-05-09

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

  • securityfocus.com /bid/22340 · vdb-entry, x_refsource_BID, x_transferred
  • www3.ca.com /securityadvisor/newsinfo/collateral.aspx?cid=97696 · x_refsource_CONFIRM, x_transferred
  • osvdb.org /31593 · vdb-entry, x_refsource_OSVDB, x_transferred
  • kb.cert.org /vuls/id/611276 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • securityfocus.com /archive/1/458648/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/23897 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /archive/1/458644/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • www3.ca.com /securityadvisor/vulninfo/Vuln.aspx?ID=34993 · x_refsource_CONFIRM, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/31704 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /archive/1/457945/30/8460/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/22199 · vdb-entry, x_refsource_BID, x_transferred
  • securityfocus.com /bid/22342 · vdb-entry, x_refsource_BID, x_transferred
  • vupen.com /english/advisories/2007/0314 · vdb-entry, x_refsource_VUPEN, x_transferred
  • kb.cert.org /vuls/id/357308 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • securitytracker.com /id?1017548 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • supportconnectw.ca.com /public/sams/lifeguard/infodocs/babldimpsec-notice.asp · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.