CVE-2007-4620

Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103
http://www.securityfocus.com/bid/28605
http://www.securitytracker.com/id?1019789
http://www.securitytracker.com/id?1019790
http://securityreason.com/securityalert/3799
http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx
http://secunia.com/advisories/29665
http://www.vupen.com/english/advisories/2008/1103/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41639
http://www.securityfocus.com/archive/1/490466/100/0/threaded

Configuration 1

cpe:2.3:a:ca:threat_manager_for_the_enterprise:r8:*:*:*:*:*:*:* cpe:2.3:a:ca:threat_manager_for_the_enterprise:r8.1:*:*:*:*:*:*:* cpe:2.3:a:ca:brightstor_arcserve_backup:11:*:windows:*:*:*:*:* cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:7.1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:8:*:*:*:*:*:*:* cpe:2.3:a:broadcom:anti-virus_for_the_enterprise:8.1:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:* cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*

---

Published : 2008-04-07 06:44

Updated : 2021-04-07 06:14

---

NVD link : CVE-2007-4620

Mitre link : CVE-2007-4620

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer