CVE-2005-1272

Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve...

7.5 HighPublic exploit

Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.

Exploit likelihood

66.1%Down 18.0 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2005-1272
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-1272
Updated: 2026-11-02

EUVDEUVD-2005-1275 No score

Record: EUVD-2005-1275
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rmpr-37mr-xqm2 No score

Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve...

Record: GHSA-rmpr-37mr-xqm2
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	CA BrightStor ARCserve Backup Agent - 'dbasqlr.exe' Remote Overflow	2005-08-03
Exploit-DB	CA BrightStor Agent for Microsoft SQL - Remote Overflow (Metasploit)	2010-04-30
Metasploit	CA BrightStor Agent for Microsoft SQL Overflow	2005-08-02

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-1272 is a high vulnerability (CVSS 7.5) in Ca Brightstor Arcserve Backup, published August 5, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 66.1%, the 99th percentile. No source names a fixed version.