Skip to content
Fencer Vulns
high 7.5

CVE-2006-5143 in the critical feed json

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r…

published 2006-10-06 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-5128

cvss
7.5
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
79.4%
EPSS 79.4% chance of exploitation in 30 days, percentile 99.6%
public exploits
5
Metasploit, Exploit-DB

Summary

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via crafted data on TCP port 6071 to the Backup Agent RPC Server (DBASVR.exe) using the RPC routines with opcode (1) 0x01, (2) 0x02, or (3) 0x18; invalid stub data on TCP port 6503 to the RPC routines with opcode (4) 0x2b or (5) 0x2d in ASCORE.dll in the Message Engine RPC Server (msgeng.exe); (6) a long hostname on TCP port 41523 to ASBRDCST.DLL in the Discovery Service (casdscsvc.exe); or unspecified vectors related to the (7) Job Engine Service.

Patch / fix

Timeline

  1. First public exploit (Metasploit exploit/windows/brightstor/message_engine_heap)
  2. Published

Exploit prediction

79.41% chance of exploitation in the next 30 days, higher than 99.6% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • Metasploit exploit/windows/brightstor/message_engine_heap CA BrightStor ARCserve Message Engine Heap Overflow metasploit exploit, average rank, 2006-10-05
  • EDB-28766 Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (2) remote, 2006-10-05
  • EDB-28765 Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (1) remote, 2006-10-05
  • EDB-16401 CA BrightStor ARCserve - Message Engine Heap Overflow (Metasploit) remote, 2010-04-30
  • EDB-3495 CA BrightStor ARCserve - 'msgeng.exe' Remote Stack Overflow remote, 2007-03-16

CVSS scores

assigned by version score vector
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.