CVE:CVE-2006-6076
CNNVD:CNNVD-200611-390
BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。
BrightStor ARCserver Backup的Tape Engine服务(tapeeng.exe)没有正确处理RPC请求，远程攻击者可以通过向该服务(默认端口6502/TCP)发送特制报文触发缓冲区溢出，导致执行任意代码。
solution:Upgrade broadcom brightstor_arcserve_backup to a higher version than 11.5,11.1,11.5:sp1,and avoid the version (,11.5],11.1,11.5:sp1; Upgrade ca brightstor_arcserve_backup to a higher version than 11,11.1,and avoid the version 11,11.1; Upgrade ca brightstor_arcserve_backup_agent to a higher version than 11.0,11.1,and avoid the version 11.0,11.1