CVE-2006-6379 in the critical feed json
Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCser…
published 2006-12-10 19 y ago modified 2026-06-16 4 mo ago also EUVD-2006-6362
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 21.1%
- EPSS 21.1% chance of exploitation in 30 days, percentile 97%
- public exploits
- 1
- Exploit-DB
Summary
Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserve Backup 9.01 up to 11.1, Enterprise Backup 10.5, and CA Server Protection Suite r2, allows remote attackers to execute arbitrary code via unspecified vectors.
Timeline
- First public exploit (EDB-1132)
- Published
Exploit prediction
21.14% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-1132 CA BrightStor ARCserve Backup - Remote Overflow remote, 2005-08-03
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
securityfocus.com
/bid/21502
vdb-entry, vendor-advisory
-
supportconnectw.ca.com
/public/storage/infodocs/babsecurity-notice.asp
vendor-advisory
-
vupen.com
/english/advisories/2006/4910
vdb-entry
-
securityfocus.com
/archive/1/453916/100/0/threaded
mailing-list
-
exchange.xforce.ibmcloud.com
/vulnerabilities/30791
vdb-entry
-
securitytracker.com
/id?1017356
vdb-entry
-
securityreason.com
/securityalert/2010
third-party-advisory
-
osvdb.org
/30775
vdb-entry
Sources
- CVE List CVE-2006-6379
- NVD CVE-2006-6379
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.