CVE-2007-5003

high · 10

Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long (1) username or (2) password to the rxrLogin command in rxRPC.dll, or a long (3) username argument to the GetUserInfo function.

CVSS

67.2%

EPSS (exploit prob.)

99th

EPSS percentile

2007-10-01

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
broadcom	brightstor_arcserve_backup_laptops_desktops	4.0
broadcom	brightstor_arcserve_backup_laptops_desktops	11.0
broadcom	brightstor_arcserve_backup_laptops_desktops	11.1
broadcom	brightstor_arcserve_backup_laptops_desktops	11.1
broadcom	brightstor_arcserve_backup_laptops_desktops	11.5
broadcom	desktop_management_suite	11.0
broadcom	desktop_management_suite	11.1
broadcom	desktop_management_suite	11.2
ca	protection_suites	r2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-5003