CVE-2006-6917: Buffer Overflow

Published Dec 31, 2006

Updated

Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine (tapeeng.exe) via a crafted RPC request with (1) opnum 38, which is not properly handled in TAPEUTIL.dll 11.5.3884.0, or (2) opnum 37, which is not properly handled in TAPEENG.dll 11.5.3884.0.

Affected Software

1 affected component

Broadcom Brightstor Arcserve Backup Server=11.5

Event History

Dec 31, 2006

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Jan 12, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-6917?

CVE-2006-6917 is categorized as a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2006-6917?

To mitigate CVE-2006-6917, it's recommended to upgrade to CA BrightStor ARCserve Backup R11.5 Server Service Pack 2 or later.

What components are affected by CVE-2006-6917?

CVE-2006-6917 specifically affects the Tape Engine component (tapeeng.exe) in CA BrightStor ARCserve Backup Server 11.5.

What types of attacks are possible with CVE-2006-6917?

Attackers can exploit CVE-2006-6917 to execute arbitrary code remotely on vulnerable systems.

Who are the impacted users of CVE-2006-6917?

Users of CA BrightStor ARCserve Backup Server version 11.5 without the latest security updates are impacted by CVE-2006-6917.