CVEvulnerability

CVE-2006-5172

10.0 HIGH Published 2007-01-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-01-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String Handling Overflow," a different vulnerability than CVE-2006-5171.

Affected configurations

• broadcom brightstor arcserve backup (<= 11.5) • broadcom brightstor arcserve backup 9.01 • broadcom brightstor enterprise backup 10.5 • ca protection suites r2

References