CVE-2007-3216 — Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute arbitrary code via crafted arguments to the (1) rxsAddNewUser, (2) rxsSetUserInfo, (3) rxsRenameUser, (4) rxsSetMessageLogSettings, (5) rxsExportData, (6) rxsSetServerOptions, (7) rxsRenameFile, (8) rxsACIManageSend, (9) rxsExportUser, (10) rxsImportUser, (11) rxsMoveUserData, (12) rxsUseLicenseIni, (13) rxsLicGetSiteId, (14) rxsGetLogFileNames, (15) rxsGetBackupLog, (16) rxsBackupComplete, (17) rxsSetDataProtectionSecurityData, (18) rxsSetDefaultConfigName, (19) rxsGetMessageLogSettings, (20) rxsHWDiskGetTotal, (21) rxsHWDiskGetFree, (22) rxsGetSubDirs, (23) rxsGetServerDBPathName, (24) rxsSetServerOptions, (25) rxsDeleteFile, (26) rxsACIManageSend, (27) rxcReadBackupSetList, (28) rxcWriteConfigInfo, (29) rxcSetAssetManagement, (30) rxcWriteFileListForRestore, (31) rxcReadSaveSetProfile, (32) rxcInitSaveSetProfile, (33) rxcAddSaveSetNextAppList, (34) rxcAddSaveSetNextFilesPathList, (35) rxcAddNextBackupSetIncWildCard, (36) rxcGetRevisions, (37) rxrAddMovedUser, (38) rxrSetClientVersion, or (39) rxsSetDataGrowthScheduleAndFilter commands

Back Back to CVE browser

HIGH

Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute arbitrary code via crafted arguments to the (1) rxsAddNewUser, (2) rxsSetUserInfo, (3) rxsRenameUser, (4) rxsSetMessageLogSettings, (5) rxsExportData, (6) rxsSetServerOptions, (7) rxsRenameFile, (8) rxsACIManageSend, (9) rxsExportUser, (10) rxsImportUser, (11) rxsMoveUserData, (12) rxsUseLicenseIni, (13) rxsLicGetSiteId, (14) rxsGetLogFileNames, (15) rxsGetBackupLog, (16) rxsBackupComplete, (17) rxsSetDataProtectionSecurityData, (18) rxsSetDefaultConfigName, (19) rxsGetMessageLogSettings, (20) rxsHWDiskGetTotal, (21) rxsHWDiskGetFree, (22) rxsGetSubDirs, (23) rxsGetServerDBPathName, (24) rxsSetServerOptions, (25) rxsDeleteFile, (26) rxsACIManageSend, (27) rxcReadBackupSetList, (28) rxcWriteConfigInfo, (29) rxcSetAssetManagement, (30) rxcWriteFileListForRestore, (31) rxcReadSaveSetProfile, (32) rxcInitSaveSetProfile, (33) rxcAddSaveSetNextAppList, (34) rxcAddSaveSetNextFilesPathList, (35) rxcAddNextBackupSetIncWildCard, (36) rxcGetRevisions, (37) rxrAddMovedUser, (38) rxrSetClientVersion, or (39) rxsSetDataGrowthScheduleAndFilter commands

Published Jun 14, 2007

10.0

HIGH

CVSS 2.0

EPSS 59.19%

Description

Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute arbitrary code via crafted arguments to the (1) rxsAddNewUser, (2) rxsSetUserInfo, (3) rxsRenameUser, (4) rxsSetMessageLogSettings, (5) rxsExportData, (6) rxsSetServerOptions, (7) rxsRenameFile, (8) rxsACIManageSend, (9) rxsExportUser, (10) rxsImportUser, (11) rxsMoveUserData, (12) rxsUseLicenseIni, (13) rxsLicGetSiteId, (14) rxsGetLogFileNames, (15) rxsGetBackupLog, (16) rxsBackupComplete, (17) rxsSetDataProtectionSecurityData, (18) rxsSetDefaultConfigName, (19) rxsGetMessageLogSettings, (20) rxsHWDiskGetTotal, (21) rxsHWDiskGetFree, (22) rxsGetSubDirs, (23) rxsGetServerDBPathName, (24) rxsSetServerOptions, (25) rxsDeleteFile, (26) rxsACIManageSend, (27) rxcReadBackupSetList, (28) rxcWriteConfigInfo, (29) rxcSetAssetManagement, (30) rxcWriteFileListForRestore, (31) rxcReadSaveSetProfile, (32) rxcInitSaveSetProfile, (33) rxcAddSaveSetNextAppList, (34) rxcAddSaveSetNextFilesPathList, (35) rxcAddNextBackupSetIncWildCard, (36) rxcGetRevisions, (37) rxrAddMovedUser, (38) rxrSetClientVersion, or (39) rxsSetDataGrowthScheduleAndFilter commands.

Affected products

Remediation

No remediation recorded yet.

Metrics

59.19% 0.59193

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.59193

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (23 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	59.19% (0.59193)	99.09th	v5 (v2026.06.15)
Jun 15, 2026	59.19% (0.59193)	98.99th	v5 (v2026.06.15)
May 17, 2026	64.28% (0.64283)	98.46th	v4 (v2025.03.14)
Mar 25, 2026	60.34% (0.60344)	98.26th	v4 (v2025.03.14)
Jan 31, 2026	57.33% (0.57328)	98.08th	v4 (v2025.03.14)
Mar 19, 2025	60.17% (0.60166)	98.04th	v4 (v2025.03.14)
Mar 17, 2025	62.76% (0.62760)	98.22th	v4 (v2025.03.14)
Feb 17, 2025	94.81% (0.94810)	99.47th	v3 (v2023.03.01)
Dec 17, 2024	92.31% (0.92314)	99.21th	v3 (v2023.03.01)
Nov 6, 2024	94.00% (0.93996)	99.24th	v3 (v2023.03.01)
Jul 2, 2024	95.10% (0.95102)	99.34th	v3 (v2023.03.01)
May 25, 2024	93.59% (0.93595)	99.10th	v3 (v2023.03.01)
Apr 17, 2024	94.31% (0.94312)	99.16th	v3 (v2023.03.01)
Mar 10, 2024	95.41% (0.95412)	99.31th	v3 (v2023.03.01)
Feb 1, 2024	95.92% (0.95921)	99.34th	v3 (v2023.03.01)
Dec 25, 2023	96.04% (0.96044)	99.35th	v3 (v2023.03.01)
Nov 16, 2023	96.00% (0.96002)	99.32th	v3 (v2023.03.01)
Oct 9, 2023	95.42% (0.95424)	99.14th	v3 (v2023.03.01)
Jul 27, 2023	96.11% (0.96109)	99.26th	v3 (v2023.03.01)
Apr 10, 2023	95.87% (0.95867)	99.08th	v3 (v2023.03.01)
Mar 7, 2023	95.72% (0.95722)	98.99th	v3 (v2023.03.01)
Mar 6, 2023	87.72% (0.87716)	99.78th	v2 (v2022.01.01)
Feb 4, 2022	87.72% (0.87716)	99.74th	v2 (v2022.01.01)

Weaknesses (1)

CWE-119

Buffer Overflow

References (15)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=599
third-party-advisoryx_refsource_IDEFENSE
http://osvdb.org/35329
vdb-entryx_refsource_OSVDB
http://research.eeye.com/html/advisories/published/AD20070920.html
third-party-advisoryx_refsource_EEYE
http://research.eeye.com/html/advisories/upcoming/20070604.html
x_refsource_MISC
http://secunia.com/advisories/25606
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/bsabld-securitynotice.asp
x_refsource_CONFIRM
http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp
x_refsource_CONFIRM
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006
x_refsource_CONFIRMVendor Advisory
http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35673
x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/archive/1/480252/100/100/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/24348
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1018216
vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id?1018728
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2007/2121
vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34805
vdb-entryx_refsource_XF

Link	Providers	Tags
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=599		third-party-advisoryx_refsource_IDEFENSE
http://osvdb.org/35329		vdb-entryx_refsource_OSVDB
http://research.eeye.com/html/advisories/published/AD20070920.html		third-party-advisoryx_refsource_EEYE
http://research.eeye.com/html/advisories/upcoming/20070604.html		x_refsource_MISC
http://secunia.com/advisories/25606		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/bsabld-securitynotice.asp		x_refsource_CONFIRM
http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/caarcservebld-securitynotice.asp		x_refsource_CONFIRM
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=156006		x_refsource_CONFIRMVendor Advisory
http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35673		x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/archive/1/480252/100/100/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/24348		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1018216		vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id?1018728		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2007/2121		vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34805		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 14, 2007

Updated Aug 7, 2024

Reserved Jun 14, 2007

Link CVE-2007-3216

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-3216

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-3216