CVE Reference: CVE-2006-5172

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2006-5172

Description:
Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String Handling Overflow," a different vulnerability than CVE-2006-5171.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/29344

ST
  1017506

SAID
  Secunia Advisory: SA23648

OSVDB
  31320

ISS
  http://www.iss.net/threats/253.html

CONFIRM
  http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp

BUGTRAQ
  http://www.securityfocus.com/archive/1/456711

BID
  22016


Return to the previous page.