Unscored severity · published Oct 10, 2006
CVE-2006-5143
Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5;…
–
CVSS
79.5%
EPSS
No
On KEV
Description
Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via crafted data on TCP port 6071 to the Backup Agent RPC Server (DBASVR.exe) using the RPC routines with opcode (1) 0x01, (2) 0x02, or (3) 0x18; invalid stub data on TCP port 6503 to the RPC routines with opcode (4) 0x2b or (5) 0x2d in ASCORE.dll in the Message Engine RPC Server (msgeng.exe); (6) a long hostname on TCP port 41523 to ASBRDCST.DLL in the Discovery Service (casdscsvc.exe); or unspecified vectors related to the (7) Job Engine Service.
Exploitation
Is it being used?
Exploit prediction (EPSS)79.5% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Brightstor Arcserve Backup · Broadcom
through 11.5; 9.01; 11.1 · source: NVD
BE
Brightstor Enterprise Backup · Broadcom
10.5 · source: NVD
BP
Business Protection Suite · Broadcom
2.0 · source: NVD
SP
Server Protection Suite · Broadcom
2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5143
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5143
Vendor Advisory
http://secunia.com/advisories/22285
securitytracker.com
http://securitytracker.com/id?1017003
securitytracker.com
http://securitytracker.com/id?1017004
securitytracker.com
http://securitytracker.com/id?1017005
securitytracker.com
http://securitytracker.com/id?1017006
Patch
http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp
More from Brightstor Arcserve Backup
–
CVE-2008-3175
Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary…
–
CVE-2008-2241
Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via…
–
CVE-2008-2242
Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by…
–
CVE-2008-1979
The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value…
–
CVE-2007-4620
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products…