← Vulnerability feed

Vulnerability record · CVE-2007-0673 · published 3 February 2007

CVE-2007-0673: Broadcom brightstor arcserve backup laptops desktops memory buffer overflow vulnerability

Broadcom · Brightstor Arcserve Backup Laptops Desktops

LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) via a value of 0xFFFFFFFF at a certain point in an authentication negotiation packet, which results in an out-of-bounds read.

7.8 CVSS 2.0 High EPSS 3.2% · top 12.2% CWE-119 · Memory buffer overflow
7.8CVSS 2.0 base score
3.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
5Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) via a value of 0xFFFFFFFF at a certain point in an authentication negotiation packet, which results in an out-of-bounds read.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/32948
http://securityreason.com/securityalert/2218
http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp Patch
http://www.securityfocus.com/archive/1/458650/100/0/threaded
http://www.securityfocus.com/bid/22337 Patch
http://osvdb.org/32948
http://securityreason.com/securityalert/2218
http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.asp Patch
http://www.securityfocus.com/archive/1/458650/100/0/threaded
http://www.securityfocus.com/bid/22337 Patch

Track CVE-2007-0673 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-4397CA ARCserve Backup RPC interface directory traversal enables remote command executionThe RPC interface exposed by asdbapi.dll in CA ARCserve Backup r11.1 through r12.0 fails to validate path input, allowing a .. (dot dot) sequence in …EPSS 81%analysed10.0CVE-2008-3175Broadcom brightstor arcserve backup vulnerabilityInteger underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote a…EPSS 14%10.0CVE-2008-2241Broadcom brightstor arcserve backup path traversal vulnerabilityDirectory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data…EPSS 12%10.0CVE-2008-1329Broadcom desktop management suite vulnerabilityUnspecified vulnerability in the NetBackup service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allow…EPSS 5.9%10.0CVE-2007-5326Broadcom brightstor arcserve backup memory buffer overflow vulnerabilityMultiple buffer overflows in (1) RPC and (2) rpcx.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote…EPSS 12%10.0CVE-2007-5329Broadcom brightstor arcserve backup vulnerabilityUnspecified vulnerability in dbasvr in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, has unknown impact and attack …EPSS 2.2%10.0CVE-2007-5331Broadcom brightstor arcserve backup code injection vulnerabilityQueue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows re…EPSS 9.9%10.0CVE-2007-5003CA BrightStor ARCserve Backup for Laptops and Desktops stack buffer overflowMultiple stack-based buffer overflows exist in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5. A remote attacker can send…EPSS 67%analysed

Source: NIST National Vulnerability Database (record CVE-2007-0673), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.