Vulnerability CVE-2007-3825 - CERT Civis.Net

Vulnerability Name:

CVE-2007-3825 (CCN-35467)

Assigned:

2007-07-17

Published:

2007-07-17

Updated:

2021-04-07

Summary:

Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allow remote attackers to execute arbitrary code by sending certain data to unspecified RPC procedures.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2007-3825

Source: IDEFENSE
Type: Vendor Advisory
20070717 Computer Associates Alert Notification Server Multiple Buffer Overflow Vulnerabilities

Source: CCN
Type: SA26088
CA Products Alert Notification Server Multiple Buffer Overflows

Source: SECUNIA
Type: Patch, Vendor Advisory
26088

Source: CCN
Type: SECTRACK ID: 1018402
CA Threat Manager Stack Overflows in Alert Notification Service Let Remote Users Execute Arbitrary Code

Source: CCN
Type: SECTRACK ID: 1018403
CA Server Protection Suite Stack Overflows in Alert Notification Service Let Remote Users Execute Arbitrary Code

Source: CCN
Type: SECTRACK ID: 1018404
CA Business Protection Suite Stack Overflows in Alert Notification Service Let Remote Users Execute Arbitrary Code

Source: CCN
Type: SECTRACK ID: 1018405
BrightStor Enterprise Backup Stack Overflows in Alert Notification Service Let Remote Users Execute Arbitrary Code

Source: CCN
Type: SECTRACK ID: 1018406
BrightStor ARCserve Stack Overflows in Alert Notification Service Let Remote Users Execute Arbitrary Code

Source: CCN
Type: CA SupportConnect July 17th, 2007
Security Notice for CA products running the Alert service

Source: CONFIRM
Type: Patch
http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-secnotice.asp

Source: CCN
Type: OSVDB ID: 36096
CA Multiple Products Threat Notification Alert Server (alert.exe) RPC Multiple Remote Overflows

Source: BID
Type: UNKNOWN
24947

Source: CCN
Type: BID-24947
Computer Associates Alert Notification Server Multiple Buffer Overflow Vulnerabilities

Source: SECTRACK
Type: UNKNOWN
1018402

Source: SECTRACK
Type: UNKNOWN
1018403

Source: SECTRACK
Type: UNKNOWN
1018404

Source: SECTRACK
Type: UNKNOWN
1018405

Source: SECTRACK
Type: UNKNOWN
1018406

Source: VUPEN
Type: UNKNOWN
ADV-2007-2559

Source: XF
Type: UNKNOWN
ca-alert-notification-bo(35467)

Source: XF
Type: UNKNOWN
ca-alertnotification-bo(35467)

Source: CCN
Type: iDefense Labs PUBLIC ADVISORY: 07.17.07
Computer Associates Alert Notification Server Multiple Buffer Overflow Vulnerabilities

Vulnerable Configuration:

Configuration 1:

cpe:/a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:*

OR cpe:/a:ca:brightstor_arcserve_client:*:*:windows:*:*:*:*:*

OR cpe:/a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:*

OR cpe:/a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*

OR cpe:/a:ca:brightstor_arcserve_backup:11:*:windows:*:*:*:*:*

OR cpe:/a:broadcom:alert_notification_server:*:*:*:*:*:*:*:*

OR cpe:/a:ca:protection_suites:r3:*:*:*:*:*:*:*

OR cpe:/a:ca:threat_manager:8:*:enterprise:*:*:*:*:*

OR cpe:/a:ca:anti-virus_for_the_enterprise:8:*:enterprise:*:*:*:*:*

OR cpe:/a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:ca:brightstor_arcserve_backup:11.0::windows:*:*:*:*:*

OR cpe:/a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:*

OR cpe:/a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*

OR cpe:/a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:*

OR cpe:/a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:*

OR cpe:/a:ca:threat_manager:8::enterprise:*:*:*:*:*

OR cpe:/a:ca:protection_suites:3.0:*:*:*:*:*:*:*

AND

cpe:/a:broadcom:anti-virus_for_the_enterprise:8:*:*:*:*:*:*:*

Denotes that component is vulnerable