CVE-2006-5142

Stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server allows remote attackers to execute arbitrary code via long messages to the CheyenneDS Mailslot.

• CWE-119

• http://secunia.com/advisories/22283Vendor Advisory
• http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp
• http://www.securityfocus.com/archive/1/447839/100/100/threaded
• http://www.securityfocus.com/archive/1/447853/100/100/threaded
• http://www.securityfocus.com/bid/20364
• http://www.tippingpoint.com/security/advisories/TSRT-06-12.htmlPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/3930Vendor Advisory
• http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744
• http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id=90744
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34694
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29365
• http://secunia.com/advisories/22283Vendor Advisory
• http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp
• http://www.securityfocus.com/archive/1/447839/100/100/threaded
• http://www.securityfocus.com/archive/1/447853/100/100/threaded
• http://www.securityfocus.com/bid/20364
• http://www.tippingpoint.com/security/advisories/TSRT-06-12.htmlPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/3930Vendor Advisory
• http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744
• http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id=90744
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34694
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29365

Published

Oct 10, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5136Multiple PHP remote file inclusion vulnerabilities in ubbt.i…
• CVE-2006-5137Multiple direct static code injection vulnerabilities in Gro…
• CVE-2006-5138Groupee UBB.threads 6.5.1.1 allows remote attackers to obtai…
• CVE-2006-5139Unspecified vulnerability in MkPortal allows remote attacker…
• CVE-2006-5140SQL injection vulnerability in display.php in Lappy512 PHP K…
• CVE-2006-5141PHP remote file inclusion vulnerability in script.php in Kev…
• CVE-2006-5143Multiple buffer overflows in CA BrightStor ARCserve Backup r…
• CVE-2006-5144Cross-site scripting (XSS) vulnerability in userupload.php i…
• CVE-2006-5145Multiple SQL injection vulnerabilities in OlateDownload 3.4.…
• CVE-2006-5146Multiple cross-site scripting (XSS) vulnerabilities in Yblog…
• CVE-2006-5147PHP remote file inclusion vulnerability in wamp_dir/setup/ye…
• CVE-2006-5148Multiple PHP remote file inclusion vulnerabilities in Forum8…