Every CVE Search/ Get API key

CVE-2007-0672

LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service...

7.8 High

LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CA_BABLDdata\Server\data\transfer.

Exploit likelihood

2.82%Up 1.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CA_BABLDdata\Server\data\transfer.

Record
CVE-2007-0672
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Updated
2026-11-02
CVE List No score

LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CA_BABLDdata\Server\data\transfer.

Record
CVE-2007-0672
Updated
2026-11-02
EUVDEUVD-2007-0669 No score

LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CA_BABLDdata\Server\data\transfer.

Record
EUVD-2007-0669
Updated
2026-11-03
GitHub AdvisoriesGHSA-9wv4-24w7-q589 No score

LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service...

LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CA_BABLDdata\Server\data\transfer.

Record
GHSA-9wv4-24w7-q589
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-0672 is a high vulnerability (CVSS 7.8) in Broadcom Brightstor Arcserve Backup Laptops Desktops, published February 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.82%, the 86th percentile. No source names a fixed version.

References

MoveEnter Open