CVE-2007-3825: broadcom brightstor_arcserve_backup

EPSS trend

Probability

14.03%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 14.03% on 18-09-2026

18-09-202618-10-2026

EPSS score

14.03%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

11 links

secunia.com/advisories/26088Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securitytracker.com/id?1018405VDB EntryX Refsource SECTRACK
www.securitytracker.com/id?1018402VDB EntryX Refsource SECTRACK
www.securitytracker.com/id?1018404VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/24947VDB EntryX Refsource BID
labs.idefense.com/intelligence/vulnerabilities/display.php?id=561Third Party AdvisoryX Refsource IDEFENSEVendor Advisory
www.securitytracker.com/id?1018406VDB EntryX Refsource SECTRACK
www.securitytracker.com/id?1018403VDB EntryX Refsource SECTRACK
exchange.xforce.ibmcloud.com/vulnerabilities/35467VDB EntryX Refsource XF
supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-secnotice.aspX Refsource CONFIRMPatch

Show all 11 references

www.vupen.com/english/advisories/2007/2559VDB EntryX Refsource VUPEN

Related vulnerabilities

CVE-2007-2523broadcomintegrated_threat_management+11.38%19y ago11-05-2007 03:55CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before 8.0.448.0.CVE-2007-2139broadcombrightstor_arcserve_backup+478.00%19y ago25-04-2007 20:00Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection Suite 2, allow remote attackers to execute arbitrary code via malformed RPC strings, a different vulnerability than CVE-2006-5171, CVE-2006-5172, and CVE-2007-1785.CVE-2007-2864broadcomanti-virus_for_the_enterprise+1149.93%19y ago06-06-2007 21:00Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.CVE-2007-2863broadcomanti-virus_for_the_enterprise+523.41%19y ago06-06-2007 21:00Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a long filename in a .CAB file.CVE-2007-1785broadcombrightstor_arcserve_backup+115.35%19y ago31-03-2007 01:00The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via crafted xdr_handle_t data in RPC packets, which is used in calculating an address for a function call, as demonstrated using the 191 (0xbf) RPC request.CVE-2007-1447broadcombrightstor_arcserve_backup14.57%19y ago16-03-2007 23:00The Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC procedure arguments, which result in memory corruption, a different vulnerability than CVE-2006-6076.

All vulnerabilities inbrightstor_arcserve_backup brightstor_enterprise_backup anti-virus_for_the_enterprise brightstor_arcserve_backup protection_suites

CVE-2007-3825: broadcom brightstor_arcserve_backup

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References