CVE-2006-6076

Broadcom Brightstor Arcserve Backup < 11.5 - Buffer Overflow

Title source: rule

Description

Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.

Exploits (3)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16407

View Code ZIP pw:eip

metasploit WORKING POC NORMAL

by MC · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/tape_engine_0x8a.rb

View Code ZIP pw:eip

metasploit WORKING POC NORMAL

by MC, aushack · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/tape_engine.rb

View Code ZIP pw:eip

References (15)

[Mailing List] http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050808.html

[Mailing List] http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050814.html

[Vendor Advisory] http://secunia.com/advisories/23060

[Third Party Advisory] http://secunia.com/advisories/24512

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1017268

[Various Sources] http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp

[US Government Resource] http://www.kb.cert.org/vuls/id/437300

[Various Sources] http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317

[Various Sources] http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34817

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/30453

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/452222/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/452318/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/456711

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/21221

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/4654

Scores

EPSS 0.7887

EPSS Percentile 99.1%

Details

Status published

Products (7)

broadcom/brightstor_arcserve_backup 11.1

broadcom/brightstor_arcserve_backup 11.5 sp1

broadcom/brightstor_arcserve_backup < 11.5

ca/brightstor_arcserve_backup 11

ca/brightstor_arcserve_backup 11.1

ca/brightstor_arcserve_backup_agent 11.0

ca/brightstor_arcserve_backup_agent 11.1

Published Nov 24, 2006

Tracked Since Feb 18, 2026