CVE-1999-1049: Broadcom Arcserve Backup

High severity, CVSS 10.0. EPSS: 1.7% chance of exploitation in the next 30 days.

ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password.

Affected products

• Broadcom Arcserve Backup: up to and including 6.5

Published 1999-02-21. Last modified 2026-06-16.