CVE-2006-6379 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 21.1% (pctl 98)
Patch early
A public exploit exists.
Description
Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via unspecified vectors.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 21.09% — more likely to be exploited than 98% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-12-10 |
| Last modified | 2026-06-16 |
Affected (3)
| Vendor | Product |
|---|---|
| broadcom | brightstor arcserve backup |
| broadcom | brightstor enterprise backup |
| broadcom | server protection suite |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | CA BrightStor ARCserve Backup - Remote Overflow | 2005-08-03 |
References
- http://securityreason.com/securityalert/2010
- http://securitytracker.com/id?1017356
- http://supportconnectw.ca.com/public/storage/infodocs/babsecurity-notice.asp
- http://www.osvdb.org/30775
- http://www.securityfocus.com/archive/1/453916/100/0/threaded
- http://www.securityfocus.com/bid/21502
- http://www.vupen.com/english/advisories/2006/4910
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30791
- http://securityreason.com/securityalert/2010
- http://securitytracker.com/id?1017356
- http://supportconnectw.ca.com/public/storage/infodocs/babsecurity-notice.asp
- http://www.osvdb.org/30775
- http://www.securityfocus.com/archive/1/453916/100/0/threaded
- http://www.securityfocus.com/bid/21502
- http://www.vupen.com/english/advisories/2006/4910
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30791
→ the Explorer · watch your stack · NVD