CVE-2007-0672: High severity CA Business Protection Suite vulnerability
LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CABABLDdata\Server\data\transfer\.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0672?
CVE-2007-0672 is classified as a denial of service vulnerability that can cause disk consumption and daemon hang.
How do I fix CVE-2007-0672?
To mitigate CVE-2007-0672, you should update to the latest version of BrightStor Mobile Backup or apply any available security patches.
Which software is affected by CVE-2007-0672?
CVE-2007-0672 affects BrightStor Mobile Backup 4.0 and various versions of Broadcom products including BrightStor ARCserve Backup and Business Protection Suite.
Can CVE-2007-0672 be exploited remotely?
Yes, CVE-2007-0672 can be exploited by remote attackers during authentication negotiation.
What happens if CVE-2007-0672 is exploited?
Exploiting CVE-2007-0672 can lead to a denial of service by consuming disk space and causing the backup daemon to hang.