Vulnerability in Broadcom Alert Notification Server
CVE-2007-3825
Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allow remote attackers to execute arbitrary code by sending certain data to unspecified RPC procedures.
EPSS: 0.140 (96.3th percentile) — read the EPSS interpretation.
Affected products
- Broadcom Alert_notification_server
- Broadcom Brightstor_arcserve_backup — versions 9.01, 11.1, 11.5
- Broadcom Brightstor_enterprise_backup — versions 10.5
- Ca Anti-virus_for_the_enterprise — versions 8
- Ca Brightstor_arcserve_backup — versions 11
- Ca Brightstor_arcserve_client
- Ca Protection_suites — versions r3
- Ca Threat_manager — versions 8
- N/a — versions n/a
References
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_IDEFENSE, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Patch)