9.3

CVE-2007-3825

Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allow remote attackers to execute arbitrary code by sending certain data to unspecified RPC procedures.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ca ≫ Anti-virus For The Enterprise Version 8 Edition enterprise
Ca ≫ Brightstor Arcserve Backup Version 11 Edition windows
Ca ≫ Brightstor Arcserve Client Edition windows
Ca ≫ Protection Suites Version r3
Ca ≫ Threat Manager Version 8 Edition enterprise
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 14.03% 0.961
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=561
Vendor Advisory
http://secunia.com/advisories/26088
Patch
Vendor Advisory
http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-secnotice.asp
Patch
http://www.securityfocus.com/bid/24947
http://www.securitytracker.com/id?1018402
http://www.securitytracker.com/id?1018403
http://www.securitytracker.com/id?1018404
http://www.securitytracker.com/id?1018405
http://www.securitytracker.com/id?1018406
http://www.vupen.com/english/advisories/2007/2559
https://exchange.xforce.ibmcloud.com/vulnerabilities/35467