CVE-2006-5172 - Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String Handling Overflow," a different vulnerability than CVE-2006-5171

Back Back to CVE browser

HIGH

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String Handling Overflow," a different vulnerability than CVE-2006-5171

Published Jan 16, 2007

10.0

HIGH

CVSS 2.0

EPSS 14.98%

Description

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String Handling Overflow," a different vulnerability than CVE-2006-5171.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (10)

http://osvdb.org/31320
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/23648
third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1017506
vdb-entryx_refsource_SECTRACK
http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp
x_refsource_CONFIRMExploit
http://www.iss.net/threats/253.html
third-party-advisoryx_refsource_ISS
http://www.securityfocus.com/archive/1/456711
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/22016
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2007/0154
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-5157
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29344
vdb-entryx_refsource_XF

Link	Providers	Tags
http://osvdb.org/31320		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/23648		third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1017506		vdb-entryx_refsource_SECTRACK
http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp		x_refsource_CONFIRMExploit
http://www.iss.net/threats/253.html		third-party-advisoryx_refsource_ISS
http://www.securityfocus.com/archive/1/456711		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/22016		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2007/0154		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-5157		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29344		vdb-entryx_refsource_XF