CVE-2007-0672

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-03 · updated 2026-06-16

Description

LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CA_BABLDdata\Server\data\transfer\.

Affected products

Broadcom Brightstor Arcserve Backup Laptops Desktops: 11.0, 11.1, 11.1-sp1
Broadcom Business Protection Suite: 2.0
Broadcom Desktop Management Suite: 11.0, 11.1
Broadcom Desktop Protection Suite: 2.0
Ca Business Protection Suite: 2.0

References

http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp
http://www.securityfocus.com/archive/1/458653/100/0/threaded
http://www.securityfocus.com/bid/22339
http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp
http://www.securityfocus.com/archive/1/458653/100/0/threaded
http://www.securityfocus.com/bid/22339

Get alerted when CVE-2007-0672 or the next vulnerability affects your stack