https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-1472.htmlhttps://patchthecve.com/cve/CVE-2008-1472.htmlTue, 16 Jun 2026 22:51:48 +0000HIGH 9.3: Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or causehttps://patchthecve.com/cve/CVE-2007-5006.htmlhttps://patchthecve.com/cve/CVE-2007-5006.htmlTue, 16 Jun 2026 22:45:16 +0000HIGH 10.0: Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores.https://patchthecve.com/cve/CVE-2007-5005.htmlhttps://patchthecve.com/cve/CVE-2007-5005.htmlTue, 16 Jun 2026 22:45:16 +0000HIGH 10.0: Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ (dot dot backslash) sequence in the destination filename argument to sub-functihttps://patchthecve.com/cve/CVE-2007-5004.htmlhttps://patchthecve.com/cve/CVE-2007-5004.htmlTue, 16 Jun 2026 22:45:16 +0000HIGH 9.3: Integer overflow in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long username and a certain "useless" password.https://patchthecve.com/cve/CVE-2007-5003.htmlhttps://patchthecve.com/cve/CVE-2007-5003.htmlTue, 16 Jun 2026 22:45:16 +0000HIGH 10.0: Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long (1) username or (2) password to the rxrLogin command in rxRPC.dll, or a long (3) username argument to https://patchthecve.com/cve/CVE-2007-3216.htmlhttps://patchthecve.com/cve/CVE-2007-3216.htmlTue, 16 Jun 2026 22:41:17 +0000HIGH 10.0: Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute arbitrary code via crafted arguments to the (1) rxsAddNewUser, (2) rxsSetUserInfo, (3) rxsRenameUser, (4) rxsSetMessageLogSettinhttps://patchthecve.com/cve/CVE-2007-0673.htmlhttps://patchthecve.com/cve/CVE-2007-0673.htmlTue, 16 Jun 2026 22:36:02 +0000HIGH 7.8: LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of service (daemon crash) via a value of 0xFFFFFFFF at a certain point in an authentication negotiation packet, which results in an out-of-bounds read.https://patchthecve.com/cve/CVE-2007-0672.htmlhttps://patchthecve.com/cve/CVE-2007-0672.htmlTue, 16 Jun 2026 22:36:02 +0000HIGH 7.8: LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and daemon hang) via a value of 0xFFFFFF7F at a certain point in an authentication negotiation packet, which writes a large amount of data to a .USX file in CA_BABLDdata\Server\data\trhttps://patchthecve.com/cve/CVE-2007-0449.htmlhttps://patchthecve.com/cve/CVE-2007-0449.htmlTue, 16 Jun 2026 22:35:35 +0000HIGH 10.0: Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote attackers to execute arbitrary code via crafted phttps://patchthecve.com/cve/CVE-2006-0307.htmlhttps://patchthecve.com/cve/CVE-2006-0307.htmlTue, 16 Jun 2026 22:20:18 +0000MEDIUM 5.0: The DM Primer in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA Businhttps://patchthecve.com/cve/CVE-2006-0306.htmlhttps://patchthecve.com/cve/CVE-2006-0306.htmlTue, 16 Jun 2026 22:20:18 +0000MEDIUM 5.0: The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite rhttps://patchthecve.com/cve/CVE-2005-3653.htmlhttps://patchthecve.com/cve/CVE-2005-3653.htmlTue, 16 Jun 2026 22:17:20 +0000HIGH 10.0: Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.