Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.

According to its version, the installation of BrightStor ARCserve Backup on the remote host is affected by multiple buffer overflows involving the application's Tape Engine and portmapper services.  An unauthenticated, remote attacker may be able to leverage these issues to crash or disable the services or to execute arbitrary code on the affected host with SYSTEM privileges.

According to its version, the installation of BrightStor ARCserve Backup on the remote host is affected by multiple buffer overflows that can be exploited by an unauthenticated, remote attacker to execute arbitrary code on the affected host with SYSTEM privileges.

This host is running BrightStor ARCServe for Windows.

The remote version of this software has multiple buffer overflow vulnerabilities in the Tape Engine MSRPC service. 

An attacker, by sending a specially crafted packet, may be able to crash the affected service or execute code on the remote host.

ID	Name	Product	Family	Severity
24816	CA BrightStor ARCserve Backup Tape Engine and Portmapper Multiple Vulnerabilities (QO86255)	Nessus	Windows	critical
24015	CA BrightStor ARCserve Backup Multiple Vulnerabilities (QO84983)	Nessus	Windows	critical
24013	CA BrightStor ARCserve Backup Tape Engine Multiple Remote Overflows (QO84983)	Nessus	Windows	critical

Detections

Analytics

CVE-2006-6076

critical

Tenable Plugins

critical

critical

critical