CVE-2006-6379
Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 21.1%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via unspecified vectors.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 21.09% probability · 97th percentile
- CISA KEV
- Not listed
- Affected
- broadcom/brightstor arcserve backup · broadcom/brightstor enterprise backup · broadcom/server protection suite
- Source
- cve@mitre.org
References
- http://securityreason.com/securityalert/2010
- http://securitytracker.com/id?1017356
- http://supportconnectw.ca.com/public/storage/infodocs/babsecurity-notice.aspVendor Advisory
- http://www.osvdb.org/30775
- http://www.securityfocus.com/archive/1/453916/100/0/threaded
- http://www.securityfocus.com/bid/21502Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4910
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30791
- http://securityreason.com/securityalert/2010
- http://securitytracker.com/id?1017356
- http://supportconnectw.ca.com/public/storage/infodocs/babsecurity-notice.aspVendor Advisory
- http://www.osvdb.org/30775
- http://www.securityfocus.com/archive/1/453916/100/0/threaded
- http://www.securityfocus.com/bid/21502Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4910
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30791
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.