CVE-2007-5003

CVE-2007-5003 describes multiple stack-based buffer overflows in CA BrightStor ARCserve Backup for Laptops and Desktops versions r11.0 through r11.5, affecting various Broadcom and CA products. This critical vulnerability allows unauthenticated remote attackers to execute arbitrary code by supplying overly long usernames or passwords to the rxrLogin command or a long username to the GetUserInfo function. With a CVSS score of 10.0, it represents a severe risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, a Metasploit module and ExploitDB entry confirm the availability of public exploit code, though there is no evidence of active exploitation or significant community discussion.