CVE-2006-6917

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

29.35%

Published

Dec 31, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBCA BrightStor ARCserve - 'tapeeng.exe' Remote Buffer Overflow TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine (tapeeng.exe) via a crafted RPC request with (1) opnum 38, which is not properly handled in TAPEUTIL.dll 11.5.3884.0, or (2) opnum 37, which is not properly handled in TAPEENG.dll 11.5.3884.0.

Affected Products (1)

broadcom · brightstor_arcserve_backup_servervulnerable

References (20)

http://supportconnectw.ca.com/public/storage/infodocs/basbrtapeeng-secnotice.asp

http://www.lssec.com/advisories/LS-20060908.pdf

http://www.lssec.com/advisories/LS-20061001.pdf

http://www.securityfocus.com/archive/1/453930/30/390/threaded

http://www.securityfocus.com/archive/1/453933/30/420/threaded

http://www.securityfocus.com/archive/1/454088/30/0/threaded

http://www.securityfocus.com/archive/1/454094/30/360/threaded

http://www.securityfocus.com/archive/1/456428/100/0/threaded

http://www.securityfocus.com/archive/1/456711