CVE:CVE-2006-6379
CNNVD:CNNVD-200612-206
BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。
BrightStor ARCserve Backup没能正确处理发送到TCP/6502端口上的RPC请求，远程攻击者可以通过发送恶意报文触发Tape Engine (tapeeng.exe)中的缓冲区溢出，导致以本地系统权限执行任意指令。
solution:Upgrade broadcom brightstor_arcserve_backup to a higher version than 9.01,11,11.1,11.5,11.5:sp1,and avoid the version 9.01,11,11.1,11.5,11.5:sp1; Upgrade broadcom brightstor_enterprise_backup to a higher version than 10.5,and avoid the version 10.5; Upgrade broadcom server_protection_suite to a higher version than 2,and avoid the version 2