CVE-2006-5172

no score yetEPSS 15%

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String Handling Overflow," a different vulnerability than CVE-2006-5171.

EPSS: 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
Published: 2007-01-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

broadcom:brightstor_arcserve_backup
broadcom:brightstor_enterprise_backup
ca:protection_suites

References

http://osvdb.org/31320
http://secunia.com/advisories/23648
http://securitytracker.com/id?1017506
http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp
http://www.iss.net/threats/253.html

Check your stack JSON