NetSight
IP …
critical10.0Public exploit code

CVE-2007-5003

Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attacker…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long (1) username or (2) password to the rxrLogin command in rxRPC.dll, or a long (3) username argument to the GetUserInfo function.

Affected products

VendorProductAffected versions
BroadcomBrightstor Arcserve Backup Laptops Desktops
Versions 4.0, 11.0, 11.1, 11.5
BroadcomDesktop Management Suite
Versions 11.0, 11.1, 11.2
CaProtection Suites
Version r2

Weakness classification

CWE-119

References