CVE - CVE-2006-5143

CVE-ID
CVE-2006-5143	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via crafted data on TCP port 6071 to the Backup Agent RPC Server (DBASVR.exe) using the RPC routines with opcode (1) 0x01, (2) 0x02, or (3) 0x18; invalid stub data on TCP port 6503 to the RPC routines with opcode (4) 0x2b or (5) 0x2d in ASCORE.dll in the Message Engine RPC Server (msgeng.exe); (6) a long hostname on TCP port 41523 to ASBRDCST.DLL in the Discovery Service (casdscsvc.exe); or unspecified vectors related to the (7) Job Engine Service.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:20365 URL:http://www.securityfocus.com/bid/20365 BUGTRAQ:20061005 TSRT-06-11: CA Multiple Product DBASVR RPC Server Multiple Buffer Overflow Vulnerabilities URL:http://www.securityfocus.com/archive/1/447862/100/100/threaded BUGTRAQ:20061005 ZDI-06-030: CA Multiple Product Discovery Service Remote Buffer Overflow Vulnerability URL:http://www.securityfocus.com/archive/1/447847/100/200/threaded BUGTRAQ:20061005 ZDI-06-031: CA Multiple Product Message Engine RPC Server Code Execution Vulnerability URL:http://www.securityfocus.com/archive/1/447848/100/100/threaded BUGTRAQ:20061006 [CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities URL:http://www.securityfocus.com/archive/1/447839/100/100/threaded BUGTRAQ:20061007 LS-20060220 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability URL:http://www.securityfocus.com/archive/1/447926/100/200/threaded BUGTRAQ:20061007 LS-20060313 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability URL:http://www.securityfocus.com/archive/1/447930/100/200/threaded BUGTRAQ:20061007 LS-20060330 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability URL:http://www.securityfocus.com/archive/1/447927/100/200/threaded CERT-VN:VU#361792 URL:http://www.kb.cert.org/vuls/id/361792 CERT-VN:VU#860048 URL:http://www.kb.cert.org/vuls/id/860048 CONFIRM:http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp CONFIRM:http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744 CONFIRM:http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id=90744 CONFIRM:http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34693 MISC:http://www.lssec.com/advisories/LS-20060220.pdf MISC:http://www.lssec.com/advisories/LS-20060313.pdf MISC:http://www.lssec.com/advisories/LS-20060330.pdf MISC:http://www.tippingpoint.com/security/advisories/TSRT-06-11.html MISC:http://www.zerodayinitiative.com/advisories/ZDI-06-030.html MISC:http://www.zerodayinitiative.com/advisories/ZDI-06-031.html SECTRACK:1017003 URL:http://securitytracker.com/id?1017003 SECTRACK:1017004 URL:http://securitytracker.com/id?1017004 SECTRACK:1017005 URL:http://securitytracker.com/id?1017005 SECTRACK:1017006 URL:http://securitytracker.com/id?1017006 SECUNIA:22285 URL:http://secunia.com/advisories/22285 VUPEN:ADV-2006-3930 URL:~~http://www.vupen.com/english/advisories/2006/3930~~ (Obsolete source) XF:ca-dbasvr-rpc-bo(29364) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/29364
Assigning CNA
MITRE Corporation
Date Record Created
20061002	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20061002)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)