CVE-2006-6379

Description

Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• Broadcom / brightstor_arcserve_backup9.01 – 9.01
• Broadcom / brightstor_arcserve_backup11 – 11
• Broadcom / brightstor_arcserve_backup11.1 – 11.1
• Broadcom / brightstor_arcserve_backup11.5 – 11.5
• Broadcom / brightstor_arcserve_backup11.5 – 11.5
• Broadcom / brightstor_enterprise_backup10.5 – 10.5
• Broadcom / server_protection_suite2 – 2

Exploits & proofs of concept

• exploit-dbCA BrightStor ARCserve Backup - Remote Overflowby cybertronic

References

• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/4910
• MISChttp://www.securityfocus.com/archive/1/453916/100/0/threaded
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/30791
• MISChttp://securitytracker.com/id?1017356
• MISChttp://securityreason.com/securityalert/2010
• MISChttp://www.osvdb.org/30775
• MISChttp://www.securityfocus.com/bid/21502
• MISChttp://supportconnectw.ca.com/public/storage/infodocs/babsecurity-notice.asp