SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2006-5171

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted…

HIGH 10.0EPSS 16.5%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 16.5%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.

Description

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow," a different vulnerability than CVE-2006-5172.

CVSS 2.0
10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
16.54% probability · 97th percentile
CISA KEV
Not listed
Affected
broadcom/brightstor arcserve backup · broadcom/brightstor enterprise backup · ca/protection suites
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.