Skip to content
Fencer Vulns
critical 10.0

CVE-2007-0449 in the critical feed json

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup…

published 2007-01-23 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-0449

cvss
10.0
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
79.8%
EPSS 79.8% chance of exploitation in 30 days, percentile 99.6%
public exploits
5
Metasploit, Exploit-DB

Summary

Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted packets to TCP port (1) 1900 or (2) 2200.

Patch / fix

Timeline

  1. Published
  2. First public exploit (EDB-3211)

Exploit prediction

79.80% chance of exploitation in the next 30 days, higher than 99.6% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • Metasploit exploit/windows/brightstor/lgserver CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow metasploit exploit, average rank, 2007-01-31
  • EDB-16400 CA BrightStor ARCserve for Laptops & Desktops LGServer - Remote Buffer Overflow (Metasploit) (1) remote, 2010-05-09
  • EDB-3244 CA BrightStor ARCserve - 'lgserver.exe' Remote Stack Overflow remote, 2007-02-01
  • EDB-3218 CA BrightStor ARCserve - 'msgeng.exe' Remote Heap Overflow (2) remote, 2007-01-28
  • EDB-3211 CA BrightStor ARCserve - 'msgeng.exe' Remote Heap Overflow (1) remote, 2007-01-27

CVSS scores

assigned by version score vector
NVD 2.0 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.