PT-2007-1917 · Ca · Ca Desktop Management Suite+3
Published
2007-01-23
·
Updated
2021-04-08
·
CVE-2007-0449
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
CA BrightStor ARCserve Backup for Laptops and Desktops versions r11.0 through r11.1 SP1
CA Mobile Backup version r4.0
CA Desktop and Business Protection Suite version r2
CA Desktop Management Suite (DMS) versions r11.0 and r11.1
Description
The issue is related to multiple buffer overflows in LGSERVER.EXE. Remote attackers can execute arbitrary code by sending crafted packets to TCP port 1900 or 2200.
Recommendations
For CA BrightStor ARCserve Backup for Laptops and Desktops versions r11.0 through r11.1 SP1, update to a version outside of this range to resolve the issue.
For CA Mobile Backup version r4.0, update to a newer version to mitigate the risk.
For CA Desktop and Business Protection Suite version r2, update to a version that is not affected by this issue.
For CA Desktop Management Suite (DMS) versions r11.0 and r11.1, update to a version that is not within this range to resolve the issue.
Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ca Brightstor Arcserve Backup For Laptops/Desktops
Ca Desktop Management Suite
Ca Desktop/Business Protection Suite
Ca Mobile Backup