CVE-2006-6076
BrightStor ARCserve Backup < 11.5 - Remote Code Execution via RPC Request to Tape Engine
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-6076.
PoCs published by Metasploit, MC, MC, aushack, including Metasploit module exploits/windows/brightstor/tape_engine_0x8a.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in CA BrightStor ARCserve Tape Engine via a crafted DCERPC request. It leverages SEH overwrites to achieve remote code execution on vulnerable versions.
Description
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.
Exploits (3)
This exploit targets a stack buffer overflow in CA BrightStor ARCserve Tape Engine via a crafted DCERPC request. It leverages SEH overwrites to achieve remote code execution on vulnerable versions.
This Metasploit module exploits a stack buffer overflow in CA BrightStor ARCserve Tape Engine via a crafted DCERPC request to opcode 0x8A, allowing arbitrary code execution. It targets BrightStor ARCserve r11.1-r11.5 on Windows 2003.
This Metasploit module exploits a stack buffer overflow in CA BrightStor ARCserve Tape Engine via a crafted DCERPC request, allowing arbitrary code execution. It targets versions r11.1 to r11.5 by leveraging SEH overwrites.