CVE-2006-5142

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 13.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-10 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server allows remote attackers to execute arbitrary code via long messages to the CheyenneDS Mailslot.

Affected products

Broadcom Brightstor Arcserve Backup: 11.5

References

http://secunia.com/advisories/22283
http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp
http://www.securityfocus.com/archive/1/447839/100/100/threaded
http://www.securityfocus.com/archive/1/447853/100/100/threaded
http://www.securityfocus.com/bid/20364
http://www.tippingpoint.com/security/advisories/TSRT-06-12.html
http://www.vupen.com/english/advisories/2006/3930
http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744
http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id=90744
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34694
https://exchange.xforce.ibmcloud.com/vulnerabilities/29365
http://secunia.com/advisories/22283

Get alerted when CVE-2006-5142 or the next vulnerability affects your stack