CVE-2007-0673

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-03 · updated 2026-06-16
Weakness: CWE-119

Description

LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) via a value of 0xFFFFFFFF at a certain point in an authentication negotiation packet, which results in an out-of-bounds read.

Affected products

Broadcom Brightstor Arcserve Backup Laptops Desktops: 11.0, 11.1, 11.1-sp1
Broadcom Business Protection Suite: 2.0
Broadcom Desktop Management Suite: 11.0, 11.1
Broadcom Desktop Protection Suite: 2.0
Ca Business Protection Suite: 2.0

References

http://osvdb.org/32948
http://securityreason.com/securityalert/2218
http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp
http://www.securityfocus.com/archive/1/458650/100/0/threaded
http://www.securityfocus.com/bid/22337
http://osvdb.org/32948
http://securityreason.com/securityalert/2218
http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp
http://www.securityfocus.com/archive/1/458650/100/0/threaded
http://www.securityfocus.com/bid/22337

Get alerted when CVE-2007-0673 or the next vulnerability affects your stack