CVE-2007-3825

Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allow remote attackers to execute arbitrary code by sending certain data to unspecified RPC procedures.

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=561Vendor Advisory
• http://secunia.com/advisories/26088Patch, Vendor Advisory
• http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-secnotice.aspPatch
• http://www.securityfocus.com/bid/24947
• http://www.securitytracker.com/id?1018402
• http://www.securitytracker.com/id?1018403
• http://www.securitytracker.com/id?1018404
• http://www.securitytracker.com/id?1018405
• http://www.securitytracker.com/id?1018406
• http://www.vupen.com/english/advisories/2007/2559
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35467
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=561Vendor Advisory
• http://secunia.com/advisories/26088Patch, Vendor Advisory
• http://supportconnectw.ca.com/public/antivirus/infodocs/caantivirus-secnotice.aspPatch
• http://www.securityfocus.com/bid/24947
• http://www.securitytracker.com/id?1018402
• http://www.securitytracker.com/id?1018403
• http://www.securitytracker.com/id?1018404
• http://www.securitytracker.com/id?1018405
• http://www.securitytracker.com/id?1018406
• http://www.vupen.com/english/advisories/2007/2559
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35467

Published

Jul 18, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3819Opera 9.21 allows remote attackers to spoof the data: URI sc…
• CVE-2007-3820konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote att…
• CVE-2007-3821Cross-site request forgery (CSRF) vulnerability in Webcit be…
• CVE-2007-3822Multiple cross-site scripting (XSS) vulnerabilities in Webci…
• CVE-2007-3823The Logging Server (Logsrv.exe) in IPSwitch WS_FTP 7.5.29.0 …
• CVE-2007-3824SQL injection vulnerability in katgoster.asp in MzK Blog (tr…
• CVE-2007-3826Microsoft Internet Explorer 7 on Windows XP SP2 allows remot…
• CVE-2007-3827Mozilla Firefox allows for cookies to be set with a null dom…
• CVE-2007-3828Unspecified vulnerability in mDNSResponder in Apple Mac OS X…
• CVE-2007-3829Multiple stack-based buffer overflows in (a) InterActual Pla…
• CVE-2007-3830Cross-site scripting (XSS) vulnerability in alert.php in ISS…
• CVE-2007-3831PHP remote file inclusion in main.php in ISS Proventia Netwo…