CVE-2007-0449

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 79%

from disclosure to weapon4 days

Published on NVDJan 23

1st PoC+4d

metasploit+8d

exploitation probability

79%top 1% of all CVEs

observed exploitation

nono source reports it

4 public exploit(s)

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted packets to TCP port (1) 1900 or (2) 2200.

Affected products

n/a · n/a

public PoCs found — 4

exploitdbwww.exploit-db.com/exploits/3244unverified exploitdbwww.exploit-db.com/exploits/3211unverified exploitdbwww.exploit-db.com/exploits/3218unverified exploitdbwww.exploit-db.com/exploits/16400unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/23897 http://securitytracker.com/id?1017548 https://exchange.xforce.ibmcloud.com/vulnerabilities/31704 http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=97696 http://www3.ca.com/securityadvisor/vulninfo/Vuln.aspx?ID=34993 http://www.kb.cert.org/vuls/id/357308 http://www.kb.cert.org/vuls/id/611276 http://www.osvdb.org/31593 http://www.securityfocus.com/archive/1/457945/30/8460/threaded http://www.securityfocus.com/archive/1/458644/100/0/threaded http://www.securityfocus.com/archive/1/458648/100/0/threaded