CVE-2007-3825
Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 14.0%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allow remote attackers to execute arbitrary code by sending certain data to unspecified RPC procedures.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 14.03% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- broadcom/alert notification server · broadcom/brightstor arcserve backup · broadcom/brightstor enterprise backup · ca/anti-virus for the enterprise · ca/brightstor arcserve backup · ca/brightstor arcserve client · ca/protection suites · ca/threat manager
- Source
- cve@mitre.org
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=561Vendor Advisory
- http://secunia.com/advisories/26088Patch, Vendor Advisory
- http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-secnotice.aspPatch
- http://www.securityfocus.com/bid/24947
- http://www.securitytracker.com/id?1018402
- http://www.securitytracker.com/id?1018403
- http://www.securitytracker.com/id?1018404
- http://www.securitytracker.com/id?1018405
- http://www.securitytracker.com/id?1018406
- http://www.vupen.com/english/advisories/2007/2559
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35467
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=561Vendor Advisory
- http://secunia.com/advisories/26088Patch, Vendor Advisory
- http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-secnotice.aspPatch
- http://www.securityfocus.com/bid/24947
- http://www.securitytracker.com/id?1018402
- http://www.securitytracker.com/id?1018403
- http://www.securitytracker.com/id?1018404
- http://www.securitytracker.com/id?1018405
- http://www.securitytracker.com/id?1018406
- http://www.vupen.com/english/advisories/2007/2559
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35467
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.