Vulnerability in Broadcom Brightstor Arcserve Backup Laptops Desktops
CVE-2007-0672
LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CA_BABLDdata\Server\data\transfer\.
EPSS: 0.028 (85.7th percentile) — read the EPSS interpretation.
Affected products
- Broadcom Brightstor_arcserve_backup_laptops_desktops — versions 11.0, 11.1
- Broadcom Business_protection_suite — versions 2.0
- Broadcom Desktop_management_suite — versions 11.0, 11.1
- Broadcom Desktop_protection_suite — versions 2.0
- Ca Business_protection_suite — versions 2.0
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Patch)