CVE-2007-4620

CA Alert Notification Service <8.1.586.0 - RCE

Title source: llm

Description

Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products including Anti-Virus for the Enterprise 7.1 through r11.1 and Threat Manager for the Enterprise 8.1 and r8, allow remote authenticated users to execute arbitrary code via crafted RPC requests.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16410

View Code ZIP pw:eip

metasploit WORKING POC NORMAL

by MC · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/etrust_itm_alert.rb

View Code ZIP pw:eip

References (11)

[Various Sources] http://community.ca.com/blogs/casecurityresponseblog/archive/2008/04/04/ca-alert-notification-server-multiple-vulnerabilities.aspx

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/41639

[Various Sources] https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=173103

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/490466/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/28605

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1019789

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1019790

[Third Party Advisory] http://secunia.com/advisories/29665

[Third Party Advisory] http://www.vupen.com/english/advisories/2008/1103/references

[Third Party Advisory] http://securityreason.com/securityalert/3799

[Third Party Advisory] http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=679

Scores

EPSS 0.7581

EPSS Percentile 98.9%

Details

CWE

CWE-119

Status published

Products (8)

broadcom/anti-virus_for_the_enterprise 7.1

broadcom/anti-virus_for_the_enterprise 8

broadcom/anti-virus_for_the_enterprise 8.1

broadcom/brightstor_arcserve_backup 11.1

broadcom/brightstor_arcserve_backup 11.5

ca/brightstor_arcserve_backup 11

ca/threat_manager_for_the_enterprise r8

ca/threat_manager_for_the_enterprise r8.1

Published Apr 07, 2008

Tracked Since Feb 18, 2026