Vulnerability in Broadcom Brightstor Arcserve Backup
CVE-2006-5172
Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String Handling Overflow," a different vulnerability than CVE-2006-5171.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.151 (96.7th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 97th percentile — 96.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.150 · newest: 0.151 · change: +0.001
Affected products
- Broadcom Brightstor Arcserve Backup — versions 9.01
- Broadcom Brightstor Enterprise Backup — versions 10.5
- Ca Protection Suites — versions r2
References
- supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp (Exploit)
- securitytracker.com/id (vdb-entry)
- www.securityfocus.com/archive/1/456711 (mailing-list)
- www.securityfocus.com/bid/22016 (vdb-entry)
- exchange.xforce.ibmcloud.com/vulnerabilities/29344 (vdb-entry)
- www.vupen.com/english/advisories/2007/0154 (vdb-entry)
- www.iss.net/threats/253.html (third-party-advisory)
- secunia.com/advisories/23648 (third-party-advisory)
- osvdb.org/31320 (vdb-entry)