CVE-2006-5143
Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via crafted data on TCP port 6071 to the Backup Agent RPC Server (DBASVR.exe) using the RPC routines with opcode (1) 0x01, (2) 0x02, or (3) 0x18; invalid stub data on TCP port 6503 to the RPC routines with opcode (4) 0x2b or (5) 0x2d in ASCORE.dll in the Message Engine RPC Server (msgeng.exe); (6) a long hostname on TCP port 41523 to ASBRDCST.DLL in the Discovery Service (casdscsvc.exe); or unspecified vectors related to the (7) Job Engine Service.
EPSS 84.63% · 99.4th percentile
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| broadcom | server_protection_suite | 2 |
| ca | brightstor_arcserve_backup | 11 |
| broadcom | brightstor_arcserve_backup | 0, 9.01, 11.1 |
| broadcom | brightstor_enterprise_backup | 10.5 |
| broadcom | business_protection_suite | 2.0 |
| n/a | n/a | n/a |
Timeline
- Oct 5, 2006 CVE Published
- Apr 30, 2010 PoC Published
- May 29, 2018 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
References
- 20061005 TSRT-06-11: CA Multiple Product DBASVR RPC Server Multiple Buffer Overflow Vulnerabilities mailing-list
- 22285 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-031.html url
- http://www.lssec.com/advisories/LS-20060330.pdf url
- ca-dbasvr-rpc-bo(29364) vdb
- 20061007 LS-20060313 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability mailing-list
- http://www.lssec.com/advisories/LS-20060313.pdf url
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34693 url
- VU#361792 third-party-advisory
- 20061007 LS-20060220 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability mailing-list
- 1017004 vdb
- VU#860048 third-party-advisory
- ADV-2006-3930 vdb
- http://www.lssec.com/advisories/LS-20060220.pdf url
- http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744 url
- 20365 vdb
- http://www.zerodayinitiative.com/advisories/ZDI-06-030.html url
- 20061005 ZDI-06-030: CA Multiple Product Discovery Service Remote Buffer Overflow Vulnerability mailing-list
- 20061007 LS-20060330 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability mailing-list
- http://www.tippingpoint.com/security/advisories/TSRT-06-11.html url
…and 8 more