NetSight
IP …
critical9.3

CVE-2007-3825

Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, a…

Impact

Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allow remote attackers to execute arbitrary code by sending certain data to unspecified RPC procedures.

Affected products

VendorProductAffected versions
BroadcomAlert Notification Server
All versions
BroadcomBrightstor Arcserve Backup
Versions 9.01, 11.1, 11.5
BroadcomBrightstor Enterprise Backup
Version 10.5
CaAnti-Virus For The Enterprise
Version 8
CaBrightstor Arcserve Backup
Version 11
CaBrightstor Arcserve Client
All versions
CaProtection Suites
Version r3
CaThreat Manager
Version 8

References