CVE-2006-5171

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 16.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-16 · updated 2026-06-16

Description

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow," a different vulnerability than CVE-2006-5172.

Affected products

Broadcom Brightstor Arcserve Backup: through 11.5; 9.01
Broadcom Brightstor Enterprise Backup: 10.5
Ca Protection Suites: r2

References

http://osvdb.org/31319
http://secunia.com/advisories/23648
http://securitytracker.com/id?1017506
http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp
http://www.iss.net/threats/252.html
http://www.securityfocus.com/archive/1/456711
http://www.securityfocus.com/bid/22015
http://www.vupen.com/english/advisories/2007/0154
https://exchange.xforce.ibmcloud.com/vulnerabilities/29343
http://osvdb.org/31319
http://secunia.com/advisories/23648
http://securitytracker.com/id?1017506

Get alerted when CVE-2006-5171 or the next vulnerability affects your stack