CVE-2007-0672: Broadcom Brightstor Arcserve Backup Laptops Desktops

High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days.

LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CA_BABLDdata\Server\data\transfer\.

Affected products

• Broadcom Brightstor Arcserve Backup Laptops Desktops: version 11.0 only; version 11.1 only
• Broadcom Business Protection Suite: version 2.0 only
• Broadcom Desktop Management Suite: version 11.0 only; version 11.1 only
• Broadcom Desktop Protection Suite: version 2.0 only
• Ca Business Protection Suite: version 2.0 only

Published 2007-02-03. Last modified 2026-06-16.