NetSight
IP …
high7.5Public exploit code

CVE-2005-2535

Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packe…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.

Affected products

VendorProductAffected versions
BroadcomArcserve Backup 2000
Version r16.5
BroadcomBrightstor Arcserve Backup
Versions 7.0, 9.0, 9.0.1, 11.0, 11.1
BroadcomBrightstor Arcserve Backup Hp
Version 11.1
BroadcomBrightstor Enterprise Backup
Versions 10, 10.0, 10.5

References