Broadcom Business Protection Suite vulnerabilities

16 CVEs affecting Broadcom Business Protection Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-4400, published 2008-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-4397, published 2008-10-14. High severity, CVSS 10.0. EPSS: 80.5% chance of exploitation in the next 30 days. Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to execute arbitrary…
CVE-2006-5143, published 2006-10-10. High severity, CVSS 7.5. EPSS: 79.5% chance of exploitation in the next 30 days. Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection…
CVE-2007-0449, published 2007-01-23. High severity, CVSS 10.0. EPSS: 79.4% chance of exploitation in the next 30 days. Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop…
CVE-2007-2139, published 2007-04-25. High severity, CVSS 10.0. EPSS: 78% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2,…
CVE-2007-0169, published 2007-01-11. High severity, CVSS 7.5. EPSS: 70.7% chance of exploitation in the next 30 days. Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to…
CVE-2007-0168, published 2007-01-11. High severity, CVSS 7.5. EPSS: 20.4% chance of exploitation in the next 30 days. The Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allows remote attackers to execute…
CVE-2006-0306, published 2006-01-19. Medium severity, CVSS 5.0. EPSS: 12.5% chance of exploitation in the next 30 days. The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1…
CVE-2007-5326, published 2007-10-13. High severity, CVSS 10.0. EPSS: 11.9% chance of exploitation in the next 30 days. Multiple buffer overflows in (1) RPC and (2) rpcx.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via…
CVE-2007-5331, published 2007-10-13. High severity, CVSS 10.0. EPSS: 9.9% chance of exploitation in the next 30 days. Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a…
CVE-2008-4399, published 2008-10-14. Medium severity, CVSS 5.0. EPSS: 8.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of…

Latest

CVE-2008-4400, published 2008-10-14. Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days. Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of service (crash of multiple…
CVE-2008-4398, published 2008-10-14. Medium severity, CVSS 5.0. EPSS: 8.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attackers to cause a denial of…
CVE-2007-5329, published 2007-10-13. High severity, CVSS 10.0. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in dbasvr in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, has unknown impact and attack vectors related to memory corruption.
CVE-2007-0673, published 2007-02-03. High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days. LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) via a value of 0xFFFFFFFF at a certain point in an…
CVE-2007-0672, published 2007-02-03. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication…