[email protected]CVE-2007-0673

HistoryFeb 03, 2007 - 1:28 a.m.

CVE-2007-0673

2007-02-0301:28:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2007-0673

lgserver.exe

brightstor arcserve backup

denial of service

vulnerability

nvd

7 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.024 Low

EPSS

Percentile

89.9%

JSON

LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) via a value of 0xFFFFFFFF at a certain point in an authentication negotiation packet, which results in an out-of-bounds read.

CPENameOperatorVersion
ca:business_protection_suiteca business protection suiteeq2.0
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq11.0
broadcom:brightstor_arcserve_backup_laptops_desktopsbroadcom brightstor arcserve backup laptops desktopseq11.1
broadcom:business_protection_suitebroadcom business protection suiteeq2.0
broadcom:desktop_management_suitebroadcom desktop management suiteeq11.0
broadcom:desktop_management_suitebroadcom desktop management suiteeq11.1
broadcom:desktop_protection_suitebroadcom desktop protection suiteeq2.0

CPE	Name	Operator	Version
ca:business_protection_suite	ca business protection suite	eq	2.0
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	11.0
broadcom:brightstor_arcserve_backup_laptops_desktops	broadcom brightstor arcserve backup laptops desktops	eq	11.1
broadcom:business_protection_suite	broadcom business protection suite	eq	2.0
broadcom:desktop_management_suite	broadcom desktop management suite	eq	11.0
broadcom:desktop_management_suite	broadcom desktop management suite	eq	11.1
broadcom:desktop_protection_suite	broadcom desktop protection suite	eq	2.0

References

osvdb.org/32948

securityreason.com/securityalert/2218

supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp

www.securityfocus.com/archive/1/458650/100/0/threaded

www.securityfocus.com/bid/22337

Social References

7 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.024 Low

EPSS

Percentile

89.9%

JSON

Related for CVE-2007-0673

prion1 cvelist1 nessus1 securityvulns1