PT-2006-5881 · Ca · Ca Server Protection Suite+3

Published 2006-10-06 · Updated 2021-04-09 · CVE-2006-5143

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CA BrightStor ARCserve Backup versions r11.5 SP1 and earlier CA BrightStor ARCserve Backup version r11.1 CA BrightStor ARCserve Backup version 9.01 CA BrightStor ARCserve Backup for Windows version r11 CA BrightStor Enterprise Backup version 10.5 CA Server Protection Suite version r2 CA Business Protection Suite version r2

Description The issue allows remote attackers to execute arbitrary code via crafted data on TCP port 6071 to the Backup Agent RPC Server (DBASVR.exe) using the RPC routines with opcode (1) 0x01, (2) 0x02, or (3) 0x18. Additionally, it can be exploited through invalid stub data on TCP port 6503 to the RPC routines with opcode (4) 0x2b or (5) 0x2d in ASCORE.dll in the Message Engine RPC Server (msgeng.exe), a long hostname on TCP port 41523 to ASBRDCST.DLL in the Discovery Service (casdscsvc.exe), or unspecified vectors related to the Job Engine Service.

Recommendations For CA BrightStor ARCserve Backup versions r11.5 SP1 and earlier, update to a version later than r11.5 SP1. For CA BrightStor ARCserve Backup version r11.1, update to a version later than r11.1. For CA BrightStor ARCserve Backup version 9.01, update to a version later than 9.01. For CA BrightStor ARCserve Backup for Windows version r11, update to a version later than r11. For CA BrightStor Enterprise Backup version 10.5, update to a version later than 10.5. For CA Server Protection Suite version r2, update to a version later than r2. For CA Business Protection Suite version r2, update to a version later than r2. As a temporary workaround, consider restricting access to the Backup Agent RPC Server (DBASVR.exe) on TCP port 6071, the Message Engine RPC Server (msgeng.exe) on TCP port 6503, and the Discovery Service (casdscsvc.exe) on TCP port 41523 until a patch is available.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-5143

Affected Products

Ca Brightstor Arcserve Backup

Ca Brightstor Enterprise Backup

Ca Business Protection Suite

Ca Server Protection Suite

References · 43

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/message_engine_heap.rb · Exploit
• 🔥 https://exploit-db.com/exploits/28766 · Exploit
• 🔥 https://exploit-db.com/exploits/3495 · Exploit
• 🔥 https://exploit-db.com/exploits/16401 · Exploit
• 🔥 https://exploit-db.com/exploits/28765 · Exploit
• http://secunia.com/advisories/22285 · Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-06-031.html · Vendor Advisory
• http://vupen.com/english/advisories/2006/3930 · Vendor Advisory
• http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp · Patch
• http://tippingpoint.com/security/advisories/TSRT-06-11.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-5143 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-06-030.html · Vendor Advisory
• http://securitytracker.com/id?1017004 · Note
• http://securityfocus.com/archive/1/archive/1/447847/100/200/threaded · Note
• http://frsirt.com/english/advisories/2006/3930 · Note