CVE-2005-2535

HIGH 7.5CVE-2005-2535 · Published 10/08/2005 · updated 16/06/2026

Package	Affected versions	Patched versions
arcserve backup 2000 broadcom	`= r16.5`	No fix yet
brightstor arcserve backup broadcom	`= 11.0= 11.1= 7.0= 9.0= 9.0.1`	No fix yet
brightstor arcserve backup hp broadcom	`= 11.1`	No fix yet
brightstor enterprise backup broadcom	`= 10= 10.0= 10.5`	No fix yet

Description

Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.

References

archives.neohapsis.com/archives/bugtraq/2005-02/0123.html · Broken Link
archives.neohapsis.com/archives/bugtraq/2005-02/0141.html · Broken Link
archives.neohapsis.com/archives/bugtraq/2005-02/0201.html · Broken Link
secunia.com/advisories/14293 · Patch
kb.cert.org/vuls/id/966880 · Patch
osvdb.org/13814 · Broken Link
securityfocus.com/bid/12536 · Exploit
www3.ca.com/securityadvisor/vulninfo/vuln.aspx · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/19320 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free