Description
LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CA_BABLDdata\Server\data\transfer\.
Metrics
CVSS 2.0 7.8/10
AV:N/AC:L/Au:N/C:N/I:N/A:CAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.aspPatch
- http://www.securityfocus.com/archive/1/458653/100/0/threaded
- http://www.securityfocus.com/bid/22339Patch
- http://supportconnectw.ca.com/public/sams/lifeguard/infodocs/babldimpsec-notice.aspPatch
- http://www.securityfocus.com/archive/1/458653/100/0/threaded
- http://www.securityfocus.com/bid/22339Patch
Timeline
- Published
- Feb 3, 2007
- Last modified
- Jun 16, 2026
- NVD status
- Modified