CVE-2005-0260

BrightStor ARCserve Backup 11.1 and earlier - Remote Code Execution via UDP Discovery Service

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2005-0260. PoCs published by Metasploit, hdm, aushack, including Metasploit module exploits/windows/brightstor/discovery_udp.

AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in CA BrightStor Discovery Service via a large UDP packet sent to port 41524. It includes payload delivery and handler functionality for remote code execution.

Description

Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16406

View Code ZIP pw:eip

This Metasploit module exploits a stack buffer overflow in CA BrightStor Discovery Service via a large UDP packet sent to port 41524. It includes payload delivery and handler functionality for remote code execution.

Classification

Working Poc 100%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: CA BrightStor Discovery Service (cheyprod.dll versions 12/12/2003 and 07/21/2004)

No auth needed

Prerequisites: Network access to UDP port 41524 · Target running vulnerable CA BrightStor Discovery Service

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

metasploit WORKING POC NORMAL

by hdm, aushack · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/discovery_udp.rb