CVE-2006-5143

🗓️ 06 Oct 2006 20:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 71 Views🌐 WEB

Multiple buffer overflows in CA BrightStor ARCserve allow remote code execution via crafted data.

Reporter	Title	Published	Views	Family All 29
Tenable Nessus	CA BrightStor ARCserve Backup DBASVR for Windows Multiple Remote Buffer Overflows	6 Oct 200600:00	–	nessus
Tenable Nessus	CA BrightStor ARCserve Backup for Windows Multiple Remote Buffer Overflows (QO81201)	6 Oct 200600:00	–	nessus
canvas	Immunity Canvas: BRIGHTSTOR_MESSAGE	10 Oct 200604:06	–	canvas
Circl	CVE-2006-5143	30 Apr 201000:00	–	circl
Check Point Advisories	CA Products Message Engine RPC Server Opcode 45 Buffer Overflow (CVE-2006-5143)	14 Oct 200900:00	–	checkpoint_advisories
Check Point Advisories	CA Products Message Engine RPC Server Opcode 43 Buffer Overflow (CVE-2006-5143)	15 Oct 200900:00	–	checkpoint_advisories
Check Point Advisories	CA Products Discovery Service Buffer Overflow (CVE-2006-5143)	12 Nov 200900:00	–	checkpoint_advisories
Cvelist	CVE-2006-5143	6 Oct 200620:00	–	cvelist
Exploit DB	CA BrightStor ARCserve - Message Engine Heap Overflow (Metasploit)	30 Apr 201000:00	–	exploitdb
Metasploit	CA BrightStor ARCserve Message Engine Heap Overflow	15 Feb 200719:08	–	metasploit

NVD

Node

Source	Link
securityfocus	www.securityfocus.com/archive/1/447927/100/200/threaded
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-06-030.html
securityfocus	www.securityfocus.com/bid/20365
securityfocus	www.securityfocus.com/archive/1/447839/100/100/threaded
www3	www.www3.ca.com/securityadvisor/blogs/posting.aspx
lssec	www.lssec.com/advisories/LS-20060313.pdf
securityfocus	www.securityfocus.com/archive/1/447930/100/200/threaded
lssec	www.lssec.com/advisories/LS-20060220.pdf
securitytracker	www.securitytracker.com/id
securityfocus	www.securityfocus.com/archive/1/447926/100/200/threaded

Parameter	Position	Path	Description	CWE
opcode 0x01	binary	tcp://<target_host>:6071	Heap overflow via crafted RPC data to Backup Agent RPC Server on port 6071	CWE-119
opcode 0x02	binary	tcp://<target_host>:6071	Heap overflow via crafted RPC data to Backup Agent RPC Server on port 6071	CWE-119
opcode 0x18	binary	tcp://<target_host>:6071	Heap overflow via crafted RPC data to Backup Agent RPC Server on port 6071	CWE-119
opcode 0x2b	binary	tcp://<target_host>:6503	Overflow via invalid stub data to ASCORE.dll RPC Server on port 6503	CWE-119
opcode 0x2d	binary	tcp://<target_host>:6503	Overflow via invalid stub data to ASCORE.dll RPC Server on port 6503	CWE-119
long hostname	binary	tcp://<target_host>:41523	Overflow via long hostname to Discovery Service (casdscsvc.exe) on port 41523	CWE-119

16 Jun 2026 22:30Current

7.5High risk

Vulners AI Score7.5

CVSS 27.5

EPSS0.78513