Published: 10/08/2005 Updated: 20/05/2021

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 up to and including 11.1 allows remote malicious users to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.

Vulnerable Product	Search on Vulmon	Subscribe to Product
broadcom arcserve backup 2000 r16.5
broadcom brightstor arcserve backup 7.0
broadcom brightstor arcserve backup 9.0
broadcom brightstor arcserve backup 9.0.1
broadcom brightstor arcserve backup 11.0
broadcom brightstor arcserve backup 11.1
broadcom brightstor arcserve backup hp 11.1
broadcom brightstor enterprise backup 10
broadcom brightstor enterprise backup 10.0
broadcom brightstor enterprise backup 10.5

## # $Id: discovery_tcprb 9179 2010-04-30 08:40:19Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Me ...

/* * BrightStor ARCserve Backup buffer overflow PoC * cybertronic@gmxnet * */ #include <stdioh> #include <sys/typesh> #include <sys/stath> #include <fcntlh> #include <netinet/inh> #include <netdbh> #define RED "\E[31m\E[1m" #define GREEN "\E[32m\E[1m" #define YELLOW "\E[33m\E[1m" #define BLUE "\E[34m\E[1 ...

NVD-CWE-Other http://archives.neohapsis.com/archives/bugtraq/2005-02/0123.html http://archives.neohapsis.com/archives/bugtraq/2005-02/0141.html http://archives.neohapsis.com/archives/bugtraq/2005-02/0201.html http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?ID=32478 http://www.kb.cert.org/vuls/id/966880 http://www.securityfocus.com/bid/12536 http://www.osvdb.org/13814 http://secunia.com/advisories/14293 https://exchange.xforce.ibmcloud.com/vulnerabilities/19320 https://nvd.nist.gov https://www.exploit-db.com/exploits/16408/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-2535

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect