CVE-2006-6076: Buffer Overflow
Published Nov 24, 2006
·Updated
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.
Affected Software
7 affected components
CA Brightstor Arcserve Backup Agent=11.0
CA Brightstor Arcserve Backup Agent=11.1
CA BrightStor ARCserve Backup=11
CA BrightStor ARCserve Backup=11.1
Broadcom Brightstor Arcserve Backup<=11.5
Broadcom Brightstor Arcserve Backup=11.5-sp1
Broadcom Brightstor Arcserve Backup=11.1
Event History
Nov 24, 2006
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:07 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2006-6076?
CVE-2006-6076 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2006-6076?
To address CVE-2006-6076, it is recommended to upgrade to a version of CA BrightStor ARCserve Backup later than 11.5.
3
What systems are affected by CVE-2006-6076?
CVE-2006-6076 affects CA BrightStor ARCserve Backup versions 11.0 to 11.5 before any security updates.
4
What is the attack vector for CVE-2006-6076?
The attack vector for CVE-2006-6076 is via certain RPC requests sent to TCP port 6502.
5
Can CVE-2006-6076 be exploited remotely?
Yes, CVE-2006-6076 can be exploited remotely by attackers targeting the vulnerable software.