peter bassill · operator
$ cve CVE-2007-0449 JSON

CVE-2007-0449 EXPLOIT

10.0
HIGH · CVSS 2.0 · EPSS 79.4% (pctl 100)

Patch early

A public exploit exists.

Description

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted packets to TCP port (1) 1900 or (2) 2200.

Scoring

CVSS10.0 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS79.37% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2007-01-23
Last modified2026-06-16

Affected (5)

VendorProduct
broadcombrightstor arcserve backup laptops desktops
broadcombrightstor mobile backup
broadcombusiness protection suite
broadcomdesktop management suite
broadcomdesktop protection suite

Public exploits

SourceTitleDate
exploit-dbCA BrightStor ARCserve for Laptops & Desktops LGServer - Remote Buffer Overflow (Metasploit) (1)2010-05-09
exploit-dbCA BrightStor ARCserve - 'lgserver.exe' Remote Stack Overflow2007-02-01
exploit-dbCA BrightStor ARCserve - 'msgeng.exe' Remote Heap Overflow (2)2007-01-28
exploit-dbCA BrightStor ARCserve - 'msgeng.exe' Remote Heap Overflow (1)2007-01-27

References

→ the Explorer  ·  watch your stack  ·  NVD