Secunia Logo
 
CVE Reference: CVE-2007-5003
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-5003

Description:
Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long (1) username or (2) password to the rxrLogin command in rxRPC.dll, or a long (3) username argument to the GetUserInfo function.

CVE Status:
Candidate

References:

ST
  1018728

SAID
  Secunia Advisory: SA25606

IDEFENSE
  http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=599

EEYE
  http://research.eeye.com/html/advisories/published/AD20070920.html

CONFIRM
  http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006
  http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp
  http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35674

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/480252/100/100/threaded

BID
  24348


Return to the previous page.