CVE-2006-5171

Description

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow," a different vulnerability than CVE-2006-5172.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/29343

http://www.vupen.com/english/advisories/2007/0154

http://www.securityfocus.com/bid/22015

http://www.securityfocus.com/archive/1/456711

http://www.iss.net/threats/252.html

http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp

http://securitytracker.com/id?1017506

http://secunia.com/advisories/23648

http://osvdb.org/31319

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3