Buffer overflow in Broadcom Brightstor Arcserve Backup Laptops Desktops
CVE-2007-0673
LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) via a value of 0xFFFFFFFF at a certain point in an authentication negotiation packet, which results in an out-of-bounds read.
Vulnerability class: Buffer Overflow
EPSS: 0.032 (87.6th percentile) — read the EPSS interpretation.
Affected products
- Broadcom Brightstor_arcserve_backup_laptops_desktops — versions 11.0, 11.1
- Broadcom Business_protection_suite — versions 2.0
- Broadcom Desktop_management_suite — versions 11.0, 11.1
- Broadcom Desktop_protection_suite — versions 2.0
- Ca Business_protection_suite — versions 2.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch)