Unscored severity · published Aug 5, 2005
CVE-2005-1272
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code…
–
CVSS
66.1%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.
Exploitation
Is it being used?
Exploit prediction (EPSS)66.1% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Brightstor Arcserve Backup · CA
9.0.1; 9.0_1; 11.0; 11.0; 11.1; 11.1 · source: NVD
BA
Brightstor Arcserve Backup Agent · CA
9.0.1; 9.0.1; 9.0.1; 11; 11.0; 11.0; +3 more · source: NVD
BE
Brightstor Enterprise Backup · Broadcom
10.0; 10.5 · source: NVD
BE
Brightstor Enterprise Backup Agent · CA
10.0; 10.0; 10.0; 10.5; 10.5; 10.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1272
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1272
www.idefense.com
http://www.idefense.com/application/poi/display?id=287&type=vulnerabilities&flashstatus=true
Patch
http://www.kb.cert.org/vuls/id/279774
Exploit
http://www.securityfocus.com/bid/14453
Patch
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33239
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/21656
More from Brightstor Enterprise Backup
–
CVE-2007-5325
Multiple buffer overflows in (1) the Message Engine and (2) AScore.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to…
–
CVE-2007-5332
Multiple unspecified vulnerabilities in (1) mediasvr and (2) caloggerd in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, have unknown impact and…
–
CVE-2007-5331
Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute…
–
CVE-2007-5330
The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to (1) execute arbitrary code via stack-based…
–
CVE-2007-5329
Unspecified vulnerability in dbasvr in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, has unknown impact and attack vectors related to memory…