PT-2007-1175 · Ca · Ca Brightstor Arcserve Backup+3

Published 2007-01-16 · Updated 2021-04-07 · CVE-2006-5172

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: CA Brightstor ARCserve Backup versions 9.01 through 11.5 CA Enterprise Backup version 10.5 CA Protection Suites version r2

Description: The issue is a stack-based buffer overflow in the RPC interface in Mediasvr.exe, allowing remote attackers to execute arbitrary code via crafted SUNRPC packets.

Recommendations: For CA Brightstor ARCserve Backup versions 9.01 through 11.5, update to a version outside of this range to resolve the issue. For CA Enterprise Backup version 10.5, update to a version outside of this range to resolve the issue. For CA Protection Suites version r2, update to a version outside of this range to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2006-5172

Affected Products

Ca Brightstor Arcserve Backup

Ca Enterprise Backup

Ca Protection Suites

Mediasvr.Exe

References · 13

• 🔥 http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5172 · Security Note
• https://t.me/cvenotify/12867 · Telegram Post
• http://securityfocus.com/bid/22016 · Note
• http://frsirt.com/english/advisories/2007/0154 · Note
• http://securityfocus.com/archive/1/456711 · Note
• http://iss.net/threats/253.html · Note
• http://securitytracker.com/id?1017506 · Note
• http://vupen.com/english/advisories/2007/0154 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29344 · Note
• http://secunia.com/advisories/23648 · Note
• http://osvdb.org/31320 · Note
• http://xforce.iss.net/xforce/xfdb/29344 · Note