CVE

Id
23021  
CVE No.
CVE-2006-6917  
Status
Candidate  
Description
Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine (tapeeng.exe) via a crafted RPC request with (1) opnum 38, which is not properly handled in TAPEUTIL.dll 11.5.3884.0, or (2) opnum 37, which is not properly handled in TAPEENG.dll 11.5.3884.0.  
Phase
Assigned (20070111)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
222292 23021 CVE-2006-6917 BUGTRAQ:20061208 LS-20060908 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability  View
222293 23021 CVE-2006-6917 URL:http://www.securityfocus.com/archive/1/453930/30/390/threaded  View
222294 23021 CVE-2006-6917 BUGTRAQ:20061208 LS-20061001 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability  View
222295 23021 CVE-2006-6917 URL:http://www.securityfocus.com/archive/1/453933/30/420/threaded  View
222296 23021 CVE-2006-6917 BUGTRAQ:20061211 Re: LS-20060908 - Computer Associates BrightStor ARCserve Backup  View
222297 23021 CVE-2006-6917 URL:http://www.securityfocus.com/archive/1/454094/30/360/threaded  View
222298 23021 CVE-2006-6917 BUGTRAQ:20061211 Re: LS-20061001 - Computer Associates BrightStor ARCserve Backup  View
222299 23021 CVE-2006-6917 URL:http://www.securityfocus.com/archive/1/454088/30/0/threaded  View
222300 23021 CVE-2006-6917 BUGTRAQ:20070109 CA BrightStor ARCserve Backup Tape Engine Exploit Security Notice  View
222301 23021 CVE-2006-6917 URL:http://www.securityfocus.com/archive/1/archive/1/456428/100/0/threaded  View
222302 23021 CVE-2006-6917 BUGTRAQ:20070111 [CAID 34955, 34956, 34957, 34958, 34959, 34817]: CA BrightStor ARCserve Backup Multiple Overflow Vulnerabilities  View
222303 23021 CVE-2006-6917 URL:http://www.securityfocus.com/archive/1/456711  View
222304 23021 CVE-2006-6917 MISC:http://www.lssec.com/advisories/LS-20061001.pdf  View
222305 23021 CVE-2006-6917 MISC:http://www.lssec.com/advisories/LS-20060908.pdf  View
222306 23021 CVE-2006-6917 MISC:http://supportconnectw.ca.com/public/storage/infodocs/basbrtapeeng-secnotice.asp  View
222307 23021 CVE-2006-6917 MILW0RM:3086  View
222308 23021 CVE-2006-6917 URL:http://milw0rm.com/exploits/3086  View
222309 23021 CVE-2006-6917 CONFIRM:http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=97428  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56131 JVNDB-2007-004823 Firefox Sage エクステンションにおけるローカルコンテキストの任意の Javascript を実行される脆弱性 Firefox Sage エクステンションには、ローカルコンテキストの任意の Javascript を実行される脆弱性が存在します。 CVE-2006-6919 23021 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004823.html  View