CVE-2006-0306

CA BrightStor Mobile Backup and ARCserve Backup - Denial of Service via Large Network Packet

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0306. PoCs published by Karma.

AI-analyzed exploit summary The exploit demonstrates a denial-of-service vulnerability in Computer Associates Unicenter Remote Control DM Primer by sending a malformed UDP packet using hping. The service hangs due to improper handling of the packet, causing a DoS condition.

Description

The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA Business Protection Suite r2 allows remote attackers to cause a denial of service (CPU consumption or application hang) via a large network packet, which causes a WSAEMESGSIZE error code that is not handled, leading to a thread exit.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Karma · textdoswindows
https://www.exploit-db.com/exploits/27101

The exploit demonstrates a denial-of-service vulnerability in Computer Associates Unicenter Remote Control DM Primer by sending a malformed UDP packet using hping. The service hangs due to improper handling of the packet, causing a DoS condition.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Computer Associates Unicenter Remote Control DM Primer
No auth needed
Prerequisites: hping tool · network access to target
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/22529
Vendor Advisory, URL Repurposed x_refsource_misc
http://www.designfolks.com.au/karma/DMPrimer/
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/422381/100/0/threaded
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0236
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18531
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16276
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015504

Scores

EPSS 0.1249
EPSS Percentile 95.7%

Details

CWE
CWE-399
Status published
Products (11)
broadcom/brightstor_arcserve_backup_laptops_desktops 11.0
broadcom/brightstor_arcserve_backup_laptops_desktops 11.1 (2 CPE variants)
broadcom/brightstor_mobile_backup r4.0
broadcom/business_protection_suite 2.0
broadcom/desktop_protection_suite 2.0
broadcom/server_protection_suite 2
broadcom/unicenter_remote_control 5.2
broadcom/unicenter_remote_control 6.0 (2 CPE variants)
ca/unicenter_remote_control 6.0 sp1 (2 CPE variants)
ca/unicenter_remote_control 6.0_build_6.0.56.3
... and 1 more
Published Jan 19, 2006
Tracked Since Feb 18, 2026