CVE-2006-6076

Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.

• http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050808.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050814.html
• http://secunia.com/advisories/23060Vendor Advisory
• http://secunia.com/advisories/24512
• http://securitytracker.com/id?1017268
• http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp
• http://www.kb.cert.org/vuls/id/437300US Government Resource
• http://www.securityfocus.com/archive/1/452222/100/0/threaded
• http://www.securityfocus.com/archive/1/452318/100/0/threaded
• http://www.securityfocus.com/archive/1/456711
• http://www.securityfocus.com/bid/21221
• http://www.vupen.com/english/advisories/2006/4654
• http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34817
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30453
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050808.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050814.html
• http://secunia.com/advisories/23060Vendor Advisory
• http://secunia.com/advisories/24512
• http://securitytracker.com/id?1017268
• http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp
• http://www.kb.cert.org/vuls/id/437300US Government Resource
• http://www.securityfocus.com/archive/1/452222/100/0/threaded
• http://www.securityfocus.com/archive/1/452318/100/0/threaded
• http://www.securityfocus.com/archive/1/456711
• http://www.securityfocus.com/bid/21221
• http://www.vupen.com/english/advisories/2006/4654
• http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34817
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30453

Published

Nov 24, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6070SQL injection vulnerability in module/account/register/regis…
• CVE-2006-6071TWiki 4.0.5 and earlier, when running under Apache 1.3 using…
• CVE-2006-6072SQL injection vulnerability in bpg/publications_list.asp in …
• CVE-2006-6073Multiple SQL injection vulnerabilities in Enthrallweb eShopp…
• CVE-2006-6074Multiple SQL injection vulnerabilities in Enthrallweb eShopp…
• CVE-2006-6075Cross-site scripting (XSS) vulnerability in addpost1.asp in …
• CVE-2006-6077The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8…
• CVE-2006-6078PHP remote file inclusion vulnerability in common.inc.php in…
• CVE-2006-6079Multiple PHP remote file inclusion vulnerabilities in LoudMo…
• CVE-2006-6080Multiple SQL injection vulnerabilities in categories.asp in …
• CVE-2006-6081PHP remote file inclusion vulnerability in Smarty_Compiler.c…
• CVE-2006-6082Multiple cross-site scripting (XSS) vulnerabilities in CreaS…