CVEvulnerability
CVE-2006-6076
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-11-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.
Affected configurations
• broadcom brightstor arcserve backup (<= 11.5)
• broadcom brightstor arcserve backup 11.1
• broadcom brightstor arcserve backup 11.5
• ca brightstor arcserve backup 11
• ca brightstor arcserve backup 11.1
• ca brightstor arcserve backup agent 11.0
• ca brightstor arcserve backup agent 11.1
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050808.html lists.grok.org.uk
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050814.html lists.grok.org.uk
- http://secunia.com/advisories/23060 Vendor Advisory
- http://secunia.com/advisories/24512 secunia.com
- http://securitytracker.com/id?1017268 securitytracker.com
- http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp supportconnectw.ca.com
- http://www.kb.cert.org/vuls/id/437300 US Government Resource
- http://www.securityfocus.com/archive/1/452222/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/452318/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/456711 www.securityfocus.com
- http://www.securityfocus.com/bid/21221 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4654 www.vupen.com
- http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317 www3.ca.com
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34817 www3.ca.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30453 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050808.html lists.grok.org.uk
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050814.html lists.grok.org.uk
- http://secunia.com/advisories/23060 Vendor Advisory
- http://secunia.com/advisories/24512 secunia.com
- http://securitytracker.com/id?1017268 securitytracker.com
- http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp supportconnectw.ca.com
- http://www.kb.cert.org/vuls/id/437300 US Government Resource
- http://www.securityfocus.com/archive/1/452222/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/452318/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/456711 www.securityfocus.com
- http://www.securityfocus.com/bid/21221 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4654 www.vupen.com
- http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317 www3.ca.com
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34817 www3.ca.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30453 exchange.xforce.ibmcloud.com