{"id":"CVE-2006-6076","aliases":["EUVD-2006-6059","GHSA-f4wf-c423-fr3w"],"status":"published","title":"Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor...","description":"Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.723,"percentile":0.9944,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2006-11-24T17:00:00Z","modified":"2026-06-16T22:32:25Z","exploits":[{"source":"exploitdb","id":"EDB-16407","title":"CA BrightStor ARCserve - Tape Engine Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-05-09","verified":true,"url":"https://www.exploit-db.com/exploits/16407"},{"source":"metasploit","id":"exploit/windows/brightstor/tape_engine","title":"CA BrightStor ARCserve Tape Engine Buffer Overflow","type":"exploit","platform":"Windows","date":"2006-11-21","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/brightstor/tape_engine"},{"source":"metasploit","id":"exploit/windows/brightstor/tape_engine_0x8a","title":"CA BrightStor ARCserve Tape Engine 0x8A Buffer Overflow","type":"exploit","platform":"Windows","date":"2010-10-04","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/brightstor/tape_engine_0x8a"}],"products":[{"vendor":"broadcom","product":"brightstor_arcserve_backup"},{"vendor":"ca","product":"brightstor_arcserve_backup"},{"vendor":"ca","product":"brightstor_arcserve_backup_agent"}],"references":[{"url":"http://www.securityfocus.com/bid/21221","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/452318/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30453","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/24512","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050814.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34817","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/456711","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://securitytracker.com/id?1017268","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://secunia.com/advisories/23060","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4654","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050808.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/452222/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/437300","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-6076"},{"url":"https://github.com/advisories/GHSA-f4wf-c423-fr3w"}],"sources":{"cve":[{"id":"CVE-2006-6076","description":"Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.","status":"published","published":"2006-11-24T17:00:00Z","modified":"2024-08-07T20:12:31.666Z","updated_at":"2026-11-02T14:33:50.374603Z"}],"euvd":[{"id":"EUVD-2006-6059","description":"Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.","status":"published","published":"2006-11-24T17:00:00Z","modified":"2024-08-07T20:12:31Z","updated_at":"2026-11-03T01:15:45.23563Z"}],"ghsa":[{"id":"GHSA-f4wf-c423-fr3w","title":"Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor...","description":"Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.","status":"published","published":"2022-05-01T07:34:37Z","modified":"2023-01-31T05:02:47Z","updated_at":"2026-11-02T14:48:19.79999Z"}],"nvd":[{"id":"CVE-2006-6076","description":"Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.","status":"published","published":"2006-11-24T17:07:00Z","modified":"2026-06-16T22:32:25.1Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:08.546281Z"}]}}