CVE-2006-6379

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 21.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-10 · updated 2026-06-16

Description

Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

Broadcom Brightstor Arcserve Backup: 9.01, 11, 11.1, 11.5, 11.5-sp1
Broadcom Brightstor Enterprise Backup: 10.5
Broadcom Server Protection Suite: 2

References

http://securityreason.com/securityalert/2010
http://securitytracker.com/id?1017356
http://supportconnectw.ca.com/public/storage/infodocs/babsecurity-notice.asp
http://www.osvdb.org/30775
http://www.securityfocus.com/archive/1/453916/100/0/threaded
http://www.securityfocus.com/bid/21502
http://www.vupen.com/english/advisories/2006/4910
https://exchange.xforce.ibmcloud.com/vulnerabilities/30791
http://securityreason.com/securityalert/2010
http://securitytracker.com/id?1017356
http://supportconnectw.ca.com/public/storage/infodocs/babsecurity-notice.asp
http://www.osvdb.org/30775

Get alerted when CVE-2006-6379 or the next vulnerability affects your stack