複数の CA 製品の BrightStor Backup Discovery Service におけるバッファオーバーフローの脆弱性
| Title |
複数の CA 製品の BrightStor Backup Discovery Service におけるバッファオーバーフローの脆弱性
|
| Summary |
ARCserve Backup、Enterprise Backup および CA Server Protection Suite を含む CA 製品の BrightStor Backup Discovery Service には、バッファオーバーフローの脆弱性が存在します。
|
| Possible impacts |
第三者により、任意のコードを実行される可能性があります。 |
| Solution |
ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date |
Dec. 8, 2006, midnight |
| Registration Date |
June 26, 2012, 3:38 p.m. |
| Last Update |
June 26, 2012, 3:38 p.m. |
|
CVSS2.0 : 危険
|
| Score |
7.5
|
| Vector |
AV:N/AC:L/Au:N/C:P/I:P/A:P |
Affected System
| CA Technologies |
|
BrightStor ARCserve Backup r11.5 SP1 およびそれ以前、11.1 以下の 9.01
|
|
BrightStor Enterprise Backup 10.5
|
|
CA Server Protection Suite r2
|
CVE (情報セキュリティ 共通脆弱性識別子)
ベンダー情報
Change Log
| No |
Changed Details |
Date of change |
| 0 |
[2012年06月26日]
掲載 |
Feb. 17, 2018, 10:37 a.m. |
NVD Vulnerability Information
CVE-2006-6379
| Summary |
Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via unspecified vectors.
|
| Publication Date |
Dec. 11, 2006, 4:28 a.m. |
| Registration Date |
Jan. 29, 2021, 3:51 p.m. |
| Last Update |
April 10, 2021, 3:54 a.m. |
Affected software configurations
| Configuration1 |
or higher |
or less |
more than |
less than |
| cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:broadcom:brightstor_arcserve_backup:11:*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:sp1:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:broadcom:server_protection_suite:2:*:*:*:*:*:*:* |
|
|
|
|
Related information, measures and tools
Common Vulnerabilities List