CVE-2006-6076

Description

Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.

Affected products

• Broadcom / brightstor_arcserve_backup11.5
• Broadcom / brightstor_arcserve_backup11.1 – 11.1
• Broadcom / brightstor_arcserve_backup11.5 – 11.5
• ca / brightstor_arcserve_backup11 – 11
• ca / brightstor_arcserve_backup11.1 – 11.1
• ca / brightstor_arcserve_backup_agent11.0 – 11.0
• ca / brightstor_arcserve_backup_agent11.1 – 11.1

Exploits & proofs of concept

• exploit-dbCA BrightStor ARCserve - Tape Engine Buffer Overflow (Metasploit)by Metasploit

References

• MISChttp://www.securityfocus.com/bid/21221
• MISChttp://www.securityfocus.com/archive/1/452318/100/0/threaded
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/30453
• VENDOR_ADVISORYhttp://secunia.com/advisories/24512
• MAILING_LISThttp://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050814.html
• MISChttp://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34817
• MISChttp://www.securityfocus.com/archive/1/456711
• MISChttp://securitytracker.com/id?1017268
• VENDOR_ADVISORYhttp://secunia.com/advisories/23060
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/4654
• MISChttp://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317
• MAILING_LISThttp://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050808.html
• MISChttp://www.securityfocus.com/archive/1/452222/100/0/threaded
• MISChttp://www.kb.cert.org/vuls/id/437300
• MISChttp://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp