Broadcom Arcserve Backup 2000 vulnerabilities

3 CVEs affecting Broadcom Arcserve Backup 2000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-2535, published 2005-08-10.

More from Broadcom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-2535, published 2005-08-10. High severity, CVSS 7.5. EPSS: 80.9% chance of exploitation in the next 30 days. Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different…
• CVE-2001-0960, published 2001-09-15. High severity, CVSS 10.0. EPSS: 3.4% chance of exploitation in the next 30 days. Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows…
• CVE-2001-0959, published 2001-09-15. Medium severity, CVSS 6.4. EPSS: 3% chance of exploitation in the next 30 days. Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files.