Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2005-1272 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Brightstor Enterprise Backup

5 documents4 sources
Severity
7.5HIGHNVD
EPSS
81.0%
top 0.85%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
4
Broadcom Brightstor Enterprise BackupCA Brightstor Arcserve BackupCA Brightstor Arcserve Backup Agent+1 more
Timeline
PublishedAug 5
Latest updateMay 1

Description

Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages4 packages

Patches

Patch: www.kb.cert.org ↗Patch: www.securityfocus.com ↗Patch: www3.ca.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rmpr-37mr-xqm2: Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11↗2022-05-01
▶
CVEList
CVE-2005-1272: Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11↗2005-08-05
▶

💥Exploits & PoCs

2
Exploit-DB
CA BrightStor Agent for Microsoft SQL - Remote Overflow (Metasploit)↗2010-04-30
▶
Exploit-DB
CA BrightStor ARCserve Backup Agent - 'dbasqlr.exe' Remote Overflow↗2005-08-03
▶
CVE-2005-1272 — HIGH severity | cvebase