Vulnerabilities > Broadcom
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-10-22 | CVE-2007-5472 | Cross-Site Scripting vulnerability in Broadcom Host-Based Intrusion Prevention System 8 Cross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion Prevention System (HIPS) before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer. | 4.3 |
| 2007-10-13 | CVE-2007-5439 | Permissions, Privileges, and Access Controls vulnerability in Broadcom Etrust Integrated Threat Management 8.1 CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors. | 5.0 |
| 2007-10-13 | CVE-2007-5437 | Link Following vulnerability in Broadcom Etrust Integrated Threat Management 8.1 The web console in CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689. | 5.8 |
| 2007-10-13 | CVE-2007-5435 | Resource Management Errors vulnerability in Broadcom Erwin Process Modeler 7.2 Unspecified vulnerability in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.2 might allow user-assisted remote attackers to cause a denial of service via a crafted Data Standards File (Datatype Standards File). | 4.3 |
| 2007-10-13 | CVE-2007-5332 | Resource Management Errors vulnerability in Broadcom products Multiple unspecified vulnerabilities in (1) mediasvr and (2) caloggerd in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, have unknown impact and attack vectors related to memory corruption. | 10.0 |
| 2007-10-13 | CVE-2007-5331 | Code Injection vulnerability in multiple products Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a malformed ONRPC protocol request for operation 0x76, which causes ARCserve Backup to dereference arbitrary pointers. | 10.0 |
| 2007-10-13 | CVE-2007-5330 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Broadcom products The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to (1) execute arbitrary code via stack-based buffer overflows in unspecified RPC procedures, and (2) trigger memory corruption related to the use of "handle" RPC arguments as pointers. | 10.0 |
| 2007-10-13 | CVE-2007-5329 | Resource Management Errors vulnerability in multiple products Unspecified vulnerability in dbasvr in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, has unknown impact and attack vectors related to memory corruption. | 10.0 |
| 2007-10-13 | CVE-2007-5328 | Permissions, Privileges, and Access Controls vulnerability in Broadcom products The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure." | 10.0 |
| 2007-10-13 | CVE-2007-5327 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Broadcom products Stack-based buffer overflow in the RPC interface for the Message Engine (mediasvr.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a long argument in the 0x10d opnum. | 10.0 |