CVE-2005-2535
BrightStor ARCserve Backup 9.0-11.1 - Remote Code Execution via Discovery Service Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-2535.
PoCs published by Metasploit, cybertronic, hdm, aushack, including Metasploit module exploits/windows/brightstor/discovery_tcp.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in CA BrightStor Discovery Service via TCP port 41523. It leverages SEH overwrites to achieve remote code execution on vulnerable Windows systems.
Description
Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.
Exploits (3)
This exploit targets a buffer overflow vulnerability in CA BrightStor Discovery Service via TCP port 41523. It leverages SEH overwrites to achieve remote code execution on vulnerable Windows systems.
This is a proof-of-concept exploit for a buffer overflow vulnerability in BrightStor ARCserve Backup. It crafts a malicious packet with specific byte patterns to trigger the overflow and potentially execute arbitrary code.
This Metasploit module exploits a buffer overflow vulnerability in CA BrightStor Discovery Service via a malformed TCP request to port 41523, leveraging SEH overwrites for arbitrary code execution.