NetSight
IP …
critical9.0Public exploit code

CVE-2007-4620

Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multip…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.

Affected products

VendorProductAffected versions
BroadcomAnti-Virus For The Enterprise
Versions 7.1, 8, 8.1
BroadcomBrightstor Arcserve Backup
Versions 11.1, 11.5
CaBrightstor Arcserve Backup
Version 11
CaThreat Manager For The Enterprise
Versions r8, r8.1

Weakness classification

CWE-119

References