Vulnerability in Broadcom Brightstor_arcserve_backup
CVE-2006-6076
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.
EPSS: 0.702 (99.3th percentile) — read the EPSS interpretation.
Affected products
- Broadcom Brightstor_arcserve_backup — versions 11.1, 11.5
- Ca Brightstor_arcserve_backup — versions 11, 11.1
- Ca Brightstor_arcserve_backup_agent — versions 11.0, 11.1
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
Frequently asked questions
- What is CVE-2006-6076?
- CVE-2006-6076 is a vulnerability in Broadcom Brightstor_arcserve_backup. Published 2006-11-24.
- Is CVE-2006-6076 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.