CVE-2006-6076
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor...
CVE-2006-6076 is a high vulnerability (CVSS 10.0) in Broadcom Brightstor Arcserve Backup, published November 24, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 72.3%, the 99th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 72.3%EPSS, 99th percentile
- Exploitation
- None known3 public exploits
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | CA BrightStor ARCserve Tape Engine Buffer Overflow | 2006-11-21 |
| Exploit-DB | CA BrightStor ARCserve - Tape Engine Buffer Overflow (Metasploit) | 2010-05-09 |
| Metasploit | CA BrightStor ARCserve Tape Engine 0x8A Buffer Overflow | 2010-10-04 |
What each source reports
NVD Score used
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.
- Record
CVE-2006-6076- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.
- Record
CVE-2006-6076- Updated
- 2026-11-02
EUVDEUVD-2006-6059No score
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.
- Record
EUVD-2006-6059- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f4wf-c423-fr3wNo score
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor...
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.
- Record
GHSA-f4wf-c423-fr3w- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/bid/21221
exchange.xforce.ibmcloud.com/vulnerabilities/30453
secunia.com/advisories/24512
lists.grok.org.uk/pipermail/full-disclosure/2006-November/050814.html
www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34817
Show 11 moreShow less
securitytracker.com/id?1017268
vupen.com/english/advisories/2006/4654
kb.cert.org/vuls/id/437300
supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp
nvd.nist.gov/vuln/detail/CVE-2006-6076
github.com/advisories/GHSA-f4wf-c423-fr3w