PT-2006-5880 · Ca · Ca Brightstor Arcserve Backup

Published 2006-10-06 · Updated 2021-04-07 · CVE-2006-5142

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CA BrightStor ARCserve Backup version R11.5

Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by sending long messages to the CheyenneDS Mailslot.

Recommendations For CA BrightStor ARCserve Backup version R11.5, consider restricting access to the CheyenneDS Mailslot to minimize the risk of exploitation until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-5142

Affected Products

Ca Brightstor Arcserve Backup

References · 12

• http://vupen.com/english/advisories/2006/3930 · Vendor Advisory
• http://secunia.com/advisories/22283 · Vendor Advisory
• http://tippingpoint.com/security/advisories/TSRT-06-12.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5142 · Security Note
• http://securityfocus.com/archive/1/447853/100/100/threaded · Note
• http://securityfocus.com/bid/20364 · Note
• http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29365 · Note
• http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp · Note
• http://securityfocus.com/archive/1/447839/100/100/threaded · Note
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34694 · Note
• http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id=90744 · Note