CVE-2007-5003: Broadcom Brightstor Arcserve Backup Laptops Desktops

High severity, CVSS 10.0. EPSS: 67.2% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long (1) username or (2) password to the rxrLogin command in rxRPC.dll, or a long (3) username argument to the GetUserInfo function.

Affected products

  • Broadcom Brightstor Arcserve Backup Laptops Desktops: version 4.0 only; version 11.0 only; version 11.1 only; version 11.5 only
  • Broadcom Desktop Management Suite: version 11.0 only; version 11.1 only; version 11.2 only
  • Ca Protection Suites: version r2 only

Published 2007-10-01. Last modified 2026-06-16.