PT-2007-2127 · Ca · Ca Brightstor Arcserve Backup For Laptops/Desktops

Published 2007-02-03 · Updated 2021-04-08 · CVE-2007-0673

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions BrightStor ARCserve Backup for Laptops & Desktops version r11.1

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This occurs when a value of 0xFFFFFFFF is sent at a certain point in an authentication negotiation packet, leading to an out-of-bounds read.

Recommendations For BrightStor ARCserve Backup for Laptops & Desktops version r11.1, consider restricting access to the authentication negotiation packet to minimize the risk of exploitation until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-0673

Affected Products

Ca Brightstor Arcserve Backup For Laptops/Desktops

References · 6

• http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-0673 · Security Note
• http://securityfocus.com/bid/22337 · Patch
• http://securityfocus.com/archive/1/458650/100/0/threaded · Note
• http://osvdb.org/32948 · Note
• http://securityreason.com/securityalert/2218 · Note