CVE-2006-6379: Buffer Overflow
First published: Sun Dec 10 2006(Updated: )
Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Broadcom ARCserve Backup | =11.5-sp1 | |
| Broadcom ARCserve Backup | =11.5 | |
| Broadcom ARCserve Backup | =11 | |
| Broadcom ARCserve Backup | =11.1 | |
| Broadcom ARCserve Backup | =9.01 | |
| Broadcom BrightStor Enterprise Backup | =10.5 | |
| Broadcom Server Protection Suite | =2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://supportconnectw.ca.com/public/storage/infodocs/babsecurity-notice.asp
- http://www.securityfocus.com/bid/21502
- http://www.osvdb.org/30775
- http://securitytracker.com/id?1017356
- http://securityreason.com/securityalert/2010
- http://www.vupen.com/english/advisories/2006/4910
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30791
- http://www.securityfocus.com/archive/1/453916/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-6379?
CVE-2006-6379 is classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2006-6379?
To fix CVE-2006-6379, you should apply the latest patches or updates provided by Broadcom for the affected CA products.
Which software is affected by CVE-2006-6379?
CVE-2006-6379 affects several versions of Broadcom's BrightStor Backup products, including ARCserve Backup, Enterprise Backup, and Server Protection Suite.
Can CVE-2006-6379 be exploited remotely?
Yes, CVE-2006-6379 can be exploited remotely, allowing attackers to execute arbitrary code on vulnerable systems.
What are the implications of not addressing CVE-2006-6379?
Failure to address CVE-2006-6379 can lead to unauthorized access, data breaches, and potentially complete system compromise.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-historical
- vendor/broadcom
- product/brightstor arcserve backup
- canonical/broadcom brightstor arcserve backup
- product/brightstor enterprise backup
- canonical/broadcom brightstor enterprise backup
- product/server protection suite
- canonical/broadcom server protection suite
- agent/software-canonical-lookup-request
- collector/nvd-index
- canonical/broadcom arcserve backup
- version/broadcom arcserve backup/11.5-sp1
- version/broadcom arcserve backup/11.5
- version/broadcom arcserve backup/11
- version/broadcom arcserve backup/11.1
- version/broadcom arcserve backup/9.01
- version/broadcom brightstor enterprise backup/10.5
- version/broadcom server protection suite/2