PT-2006-7514 · Ca · Ca Brightstor Arcserve Backup

Winny Thomas · Publicado 2006-12-31 · Atualizado 2021-04-07 · CVE-2006-6917

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: CA BrightStor ARCserve Backup R11.5 Server versions prior to SP2

Description: The issue concerns multiple buffer overflows that allow remote attackers to execute arbitrary code in the Tape Engine (tapeeng.exe) via crafted RPC requests. Specifically, the problem lies in the handling of opnum 38 in TAPEUTIL.dll 11.5.3884.0 and opnum 37 in TAPEENG.dll 11.5.3884.0.

Recommendations: For CA BrightStor ARCserve Backup R11.5 Server versions prior to SP2, apply Service Pack 2 to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2006-6917

Produtos afetados

Ca Brightstor Arcserve Backup

Referências · 13

• 🔥 https://exploit-db.com/exploits/3086 · Exploit
• http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=97428 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6917 · Nota de Segurança
• http://lssec.com/advisories/LS-20060908.pdf · Nota
• http://securityfocus.com/archive/1/456711 · Nota
• http://securityfocus.com/archive/1/453930/30/390/threaded · Nota
• http://securityfocus.com/archive/1/454094/30/360/threaded · Nota
• http://supportconnectw.ca.com/public/storage/infodocs/basbrtapeeng-secnotice.asp · Nota
• http://securityfocus.com/archive/1/454088/30/0/threaded · Nota
• http://securityfocus.com/archive/1/456428/100/0/threaded · Nota
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34959 · Nota
• http://lssec.com/advisories/LS-20061001.pdf · Nota
• http://securityfocus.com/archive/1/453933/30/420/threaded · Nota