CVE-2006-6076

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 70%

from disclosure to weapon1262 days

Published on NVDNov 24

1st PoC+1262d

metasploitNov 21

exploitation probability

70%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/16407unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050808.html http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050814.html http://secunia.com/advisories/23060 http://secunia.com/advisories/24512 http://securitytracker.com/id?1017268 https://exchange.xforce.ibmcloud.com/vulnerabilities/30453 http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317 http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34817 http://www.kb.cert.org/vuls/id/437300 http://www.securityfocus.com/archive/1/452222/100/0/threaded http://www.securityfocus.com/archive/1/452318/100/0/threaded