PT-2006-6990 · Ca · Ca Server Protection Suite+3

Published 2006-12-10 · Updated 2021-04-09 · CVE-2006-6379

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CA ARCserve Backup versions prior to r11.5 SP2 CA ARCserve Backup versions 9.01 through 11.1 CA Enterprise Backup version 10.5 CA Server Protection Suite version r2

Description A buffer overflow issue exists in the BrightStor Backup Discovery Service of multiple CA products. This issue allows remote attackers to execute arbitrary code via unspecified vectors.

Recommendations For CA ARCserve Backup versions prior to r11.5 SP2, update to version r11.5 SP2 or later. For CA ARCserve Backup versions 9.01 through 11.1, update to a version outside of this range. For CA Enterprise Backup version 10.5, update to a version later than 10.5. For CA Server Protection Suite version r2, update to a version later than r2.

Exploit

Fix

Related Identifiers

CVE-2006-6379

Affected Products

Brightstor Backup Discovery Service

Ca Arcserve Backup

Ca Enterprise Backup

Ca Server Protection Suite

References · 10

• 🔥 https://exploit-db.com/exploits/1132 · Exploit
• http://supportconnectw.ca.com/public/storage/infodocs/babsecurity-notice.asp · Vendor Advisory
• http://securityfocus.com/bid/21502 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6379 · Security Note
• http://securitytracker.com/id?1017356 · Note
• http://securityreason.com/securityalert/2010 · Note
• http://securityfocus.com/archive/1/453916/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/4910 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30791 · Note
• http://osvdb.org/30775 · Note