Lucene search

K
cveMitreCVE-2006-6917
HistoryJan 11, 2007 - 8:00 p.m.

CVE-2006-6917

2007-01-1120:00:00
mitre
web.nvd.nist.gov
60
ca
brightstor arcserve
buffer overflow
remote code execution
cve-2006-6917
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.91

Percentile

98.9%

Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine (tapeeng.exe) via a crafted RPC request with (1) opnum 38, which is not properly handled in TAPEUTIL.dll 11.5.3884.0, or (2) opnum 37, which is not properly handled in TAPEENG.dll 11.5.3884.0.

Affected configurations

Nvd
Node
broadcombrightstor_arcserve_backup_serverMatch11.5
VendorProductVersionCPE
broadcombrightstor_arcserve_backup_server11.5cpe:2.3:a:broadcom:brightstor_arcserve_backup_server:11.5:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.91

Percentile

98.9%