CVE-2006-6076
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
60Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 72%
from disclosure to weapon1262 days
Published on NVDNov 24
1st PoC+1262d
metasploitNov 21
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16407⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050808.htmlhttp://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050814.htmlhttp://secunia.com/advisories/23060http://secunia.com/advisories/24512http://securitytracker.com/id?1017268https://exchange.xforce.ibmcloud.com/vulnerabilities/30453http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asphttp://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34817http://www.kb.cert.org/vuls/id/437300http://www.securityfocus.com/archive/1/452222/100/0/threadedhttp://www.securityfocus.com/archive/1/452318/100/0/threaded