Buffer overflow in Broadcom Brightstor_arcserve_backup_laptops_desktops
CVE-2007-5003
Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long (1) username or (2) password to the rxrLo…
Vulnerability class: Buffer Overflow
EPSS: 0.672 (99.2th percentile) — read the EPSS interpretation.
Affected products
- Broadcom Brightstor_arcserve_backup_laptops_desktops — versions 4.0, 11.0, 11.1
- Broadcom Desktop_management_suite — versions 11.0, 11.1, 11.2
- Ca Protection_suites — versions r2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_IDEFENSE, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (third-party-advisory, x_refsource_EEYE)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2007-5003?
- CVE-2007-5003 is a vulnerability in Broadcom Brightstor_arcserve_backup_laptops_desktops, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2007-10-01.
- Is CVE-2007-5003 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.