PT-2006-6721 · Ca · Ca Brightstor Arcserve Backup

Published 2006-11-24 · Updated 2021-04-07 · CVE-2006-6076

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA BrightStor ARCserve Backup versions 11.5 and earlier

Description The issue is related to a buffer overflow in the Tape Engine (tapeeng.exe) that allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.

Recommendations For CA BrightStor ARCserve Backup versions 11.5 and earlier, update to a version later than 11.5 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2006-6076

Affected Products

Ca Brightstor Arcserve Backup

References · 22

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/tape_engine.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16407 · Exploit
• http://secunia.com/advisories/23060 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6076 · Security Note
• http://securityfocus.com/archive/1/452222/100/0/threaded · Note
• http://securitytracker.com/id?1017268 · Note
• http://securityfocus.com/archive/1/456711 · Note
• http://securityfocus.com/archive/1/archive/1/452318/100/0/threaded · Note
• http://securityfocus.com/archive/1/452318/100/0/threaded · Note
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34817 · Note
• http://securityfocus.com/bid/21221 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050808.html · Note
• http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp · Note
• http://frsirt.com/english/advisories/2006/4654 · Note
• http://kb.cert.org/vuls/id/437300 · Note