CVE-2006-6076

CRITICAL 10.0CVE-2006-6076 · Published 24/11/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
brightstor arcserve backup broadcom	`= 11.1= 11.5≤ 11.5`	No fix yet
brightstor arcserve backup ca	`= 11= 11.1`	No fix yet
brightstor arcserve backup agent ca	`= 11.0= 11.1`	No fix yet

Description

Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.

References

lists.grok.org.uk/pipermail/full-disclosure/2006-November/050808.html
lists.grok.org.uk/pipermail/full-disclosure/2006-November/050814.html
secunia.com/advisories/23060 · Vendor Advisory
secunia.com/advisories/24512
securitytracker.com/id
supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp
kb.cert.org/vuls/id/437300 · US Government Resource
securityfocus.com/archive/1/452222/100/0/threaded
securityfocus.com/archive/1/452318/100/0/threaded
securityfocus.com/archive/1/456711
securityfocus.com/bid/21221
vupen.com/english/advisories/2006/4654
www3.ca.com/securityadvisor/newsinfo/collateral.aspx
www3.ca.com/securityadvisor/vulninfo/vuln.aspx
exchange.xforce.ibmcloud.com/vulnerabilities/30453

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free