CVE-2006-6917

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 30.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-31 · updated 2026-06-16

Description

Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine (tapeeng.exe) via a crafted RPC request with (1) opnum 38, which is not properly handled in TAPEUTIL.dll 11.5.3884.0, or (2) opnum 37, which is not properly handled in TAPEENG.dll 11.5.3884.0.

Affected products

Broadcom Brightstor Arcserve Backup Server: 11.5

References

http://supportconnectw.ca.com/public/storage/infodocs/basbrtapeeng-secnotice.asp
http://www.lssec.com/advisories/LS-20060908.pdf
http://www.lssec.com/advisories/LS-20061001.pdf
http://www.securityfocus.com/archive/1/453930/30/390/threaded
http://www.securityfocus.com/archive/1/453933/30/420/threaded
http://www.securityfocus.com/archive/1/454088/30/0/threaded
http://www.securityfocus.com/archive/1/454094/30/360/threaded
http://www.securityfocus.com/archive/1/456428/100/0/threaded
http://www.securityfocus.com/archive/1/456711
http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=97428
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34959
https://www.exploit-db.com/exploits/3086

Get alerted when CVE-2006-6917 or the next vulnerability affects your stack