10
CVE-2006-5172
- EPSS 14.88%
- Veröffentlicht 16.01.2007 20:28:00
- Zuletzt bearbeitet 16.06.2026 22:30:38
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String Handling Overflow," a different vulnerability than CVE-2006-5171.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Broadcom ≫ Brightstor Arcserve Backup Version <= 11.5
Broadcom ≫ Brightstor Arcserve Backup Version9.01
Broadcom ≫ Brightstor Enterprise Backup Version10.5
Ca ≫ Protection Suites Versionr2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 14.88% | 0.963 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
http://www.securityfocus.com/archive/1/456711
http://secunia.com/advisories/23648
http://securitytracker.com/id?1017506
http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp
http://www.vupen.com/english/advisories/2007/0154
http://osvdb.org/31320
http://www.iss.net/threats/253.html
http://www.securityfocus.com/bid/22016
https://exchange.xforce.ibmcloud.com/vulnerabilities/29344