Broadcom Brightstor Arcserve Backup Laptops Desktops vulnerabilities

11 CVEs affecting Broadcom Brightstor Arcserve Backup Laptops Desktops, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-5006, published 2007-10-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0449, published 2007-01-23. High severity, CVSS 10.0. EPSS: 79.4% chance of exploitation in the next 30 days. Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop…
CVE-2007-5003, published 2007-10-01. High severity, CVSS 10.0. EPSS: 67.2% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long…
CVE-2007-3216, published 2007-06-14. High severity, CVSS 10.0. EPSS: 59.2% chance of exploitation in the next 30 days. Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute arbitrary code via crafted…
CVE-2007-5006, published 2007-10-01. High severity, CVSS 10.0. EPSS: 21.2% chance of exploitation in the next 30 days. Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers…
CVE-2005-3653, published 2005-12-31. High severity, CVSS 10.0. EPSS: 18.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary…
CVE-2006-0306, published 2006-01-19. Medium severity, CVSS 5.0. EPSS: 12.5% chance of exploitation in the next 30 days. The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1…
CVE-2007-5004, published 2007-10-01. High severity, CVSS 9.3. EPSS: 8.9% chance of exploitation in the next 30 days. Integer overflow in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long username and a…
CVE-2007-5005, published 2007-10-01. High severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days. Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite…
CVE-2006-0307, published 2006-01-19. Medium severity, CVSS 5.0. EPSS: 3.8% chance of exploitation in the next 30 days. The DM Primer in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter…
CVE-2007-0673, published 2007-02-03. High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days. LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) via a value of 0xFFFFFFFF at a certain point in an…

Latest

CVE-2007-0672, published 2007-02-03. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication…