{"schemaVersion":3,"id":"CVE-2007-4620","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.","dates":{"published":"2008-04-07T18:00:00.000Z","modified":"2024-08-07T15:01:09.882Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9,"severity":"high","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.52274,"percentile":0.98952,"severity":"critical","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.52274},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.52274,"percentile":0.98952}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.52274,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.52274,"percentile":0.98952}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"16410","name":"Computer Associates - Alert Notification Buffer Overflow (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/16410","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/16410.rb","codes":["CVE-2007-4620","OSVDB-44040"]},"metasploit":null},{"id":"MSF_EXPLOIT_WINDOWS_BRIGHTSTOR_ETRUST_ITM_ALERT","name":"Computer Associates Alert Notification Buffer Overflow","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/windows/brightstor/etrust_itm_alert.rb","maturity":"poc","reliabilityScore":0.3333333333333333,"verified":false,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/windows/brightstor/etrust_itm_alert","rank":"200","rankName":"average","postAuth":false,"check":false,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":2,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"broadcom","product":"anti-virus_for_the_enterprise","name":"anti-virus for the enterprise","label":"anti-virus_for_the_enterprise","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.1","noFixRecorded":false,"fixedIn":null},{"text":"8","noFixRecorded":false,"fixedIn":null},{"text":"8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.1 | 8 | 8.1","eol":null,"hubHref":"/vendor/broadcom/anti-virus_for_the_enterprise"},{"vendor":"broadcom","product":"brightstor_arcserve_backup","name":"brightstor arcserve backup","label":"brightstor_arcserve_backup","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"11.1","noFixRecorded":false,"fixedIn":null},{"text":"11.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.1 | 11.5","eol":null,"hubHref":"/vendor/broadcom/brightstor_arcserve_backup"},{"vendor":"ca","product":"brightstor_arcserve_backup","name":"brightstor arcserve backup","label":"brightstor_arcserve_backup","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"11","noFixRecorded":false,"fixedIn":null}],"versionsText":"11","eol":null,"hubHref":"/vendor/ca/brightstor_arcserve_backup"},{"vendor":"ca","product":"threat_manager_for_the_enterprise","name":"threat manager for the enterprise","label":"threat_manager_for_the_enterprise","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"r8","noFixRecorded":false,"fixedIn":null},{"text":"r8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"r8 | r8.1","eol":null,"hubHref":"/vendor/ca/threat_manager_for_the_enterprise"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securitytracker.com/id?1019790","label":"www.securitytracker.com/id?1019790","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://securityreason.com/securityalert/3799","label":"securityreason.com/securityalert/3799","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"http://www.securitytracker.com/id?1019789","label":"www.securitytracker.com/id?1019789","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103","label":"support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103","hostname":"support.ca.com","tags":["X Refsource CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41639","label":"exchange.xforce.ibmcloud.com/vulnerabilities/41639","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx","label":"community.ca.com/blogs/…","hostname":"community.ca.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.vupen.com/english/advisories/2008/1103/references","label":"www.vupen.com/english/advisories/2008/1103/references","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.securityfocus.com/archive/1/490466/100/0/threaded","label":"www.securityfocus.com/archive/1/490466/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.securityfocus.com/bid/28605","label":"www.securityfocus.com/bid/28605","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://secunia.com/advisories/29665","label":"secunia.com/advisories/29665","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679","label":"labs.idefense.com/intelligence/vulnerabilities/display.php?id=679","hostname":"labs.idefense.com","tags":["Third Party Advisory","X Refsource IDEFENSE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2008-04-07T18:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T15:01:09.882Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:51:38.691Z","stale":false,"partial":false}}