FKIE_CVE-2005-2535

Vulnerability from fkie_nvd - Published: 2005-08-10 04:00 - Updated: 2025-04-03 01:03
Severity ?
Summary
Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.
References
cve@mitre.orghttp://archives.neohapsis.com/archives/bugtraq/2005-02/0123.htmlBroken Link
cve@mitre.orghttp://archives.neohapsis.com/archives/bugtraq/2005-02/0141.htmlBroken Link
cve@mitre.orghttp://archives.neohapsis.com/archives/bugtraq/2005-02/0201.htmlBroken Link
cve@mitre.orghttp://secunia.com/advisories/14293Patch, Vendor Advisory
cve@mitre.orghttp://www.kb.cert.org/vuls/id/966880Patch, Third Party Advisory, US Government Resource
cve@mitre.orghttp://www.osvdb.org/13814Broken Link
cve@mitre.orghttp://www.securityfocus.com/bid/12536Exploit, Patch, Third Party Advisory, VDB Entry
cve@mitre.orghttp://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?ID=32478Patch
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/19320Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2005-02/0123.htmlBroken Link
af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2005-02/0141.htmlBroken Link
af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2005-02/0201.htmlBroken Link
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/14293Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/966880Patch, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/13814Broken Link
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/12536Exploit, Patch, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?ID=32478Patch
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/19320Third Party Advisory, VDB Entry
Impacted products
Vendor Product Version
broadcom arcserve_backup_2000 r16.5
broadcom brightstor_arcserve_backup 7.0
broadcom brightstor_arcserve_backup 9.0
broadcom brightstor_arcserve_backup 9.0
broadcom brightstor_arcserve_backup 9.0
broadcom brightstor_arcserve_backup 9.0.1
broadcom brightstor_arcserve_backup 11.0
broadcom brightstor_arcserve_backup 11.1
broadcom brightstor_arcserve_backup 11.1
broadcom brightstor_arcserve_backup 11.1
broadcom brightstor_arcserve_backup 11.1
broadcom brightstor_arcserve_backup 11.1
broadcom brightstor_arcserve_backup 11.1
broadcom brightstor_arcserve_backup 11.1
broadcom brightstor_arcserve_backup_hp 11.1
broadcom brightstor_enterprise_backup 10
broadcom brightstor_enterprise_backup 10.0
broadcom brightstor_enterprise_backup 10.0
broadcom brightstor_enterprise_backup 10.0
broadcom brightstor_enterprise_backup 10.0
broadcom brightstor_enterprise_backup 10.5
broadcom brightstor_enterprise_backup 10.5
broadcom brightstor_enterprise_backup 10.5
broadcom brightstor_enterprise_backup 10.5
broadcom brightstor_enterprise_backup 10.5
broadcom brightstor_enterprise_backup 10.5
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:broadcom:arcserve_backup_2000:r16.5:*:windows:ja:*:*:*:*",
              "matchCriteriaId": "0F92699B-5BF2-4B6D-9E5A-79FC5419B48B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:7.0:*:linux:*:*:*:*:*",
              "matchCriteriaId": "3A0F8A34-6C29-409B-8F45-9CFA3F3D476C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.0:*:linux:*:*:*:*:*",
              "matchCriteriaId": "A0A0939D-F6B0-419B-834E-1A526425ED16",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.0:*:linux:ja:*:*:*:*",
              "matchCriteriaId": "A740AFED-83A1-47DA-AEB4-EF89E9D0D216",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.0:*:netware:*:*:*:*:*",
              "matchCriteriaId": "F8EB5A1B-BAA2-46EB-84E2-E10983B1B39E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.0.1:*:windows:*:*:*:*:*",
              "matchCriteriaId": "3985E7FC-61E5-46CD-ACD5-BCA398668E09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.0:*:windows:*:*:*:*:*",
              "matchCriteriaId": "AA3BE714-5F8A-4D72-B9C2-588966436F6C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:aix:*:*:*:*:*",
              "matchCriteriaId": "35547C3F-7BF2-4DC0-9B8E-BF83473E6DD9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:linux:*:*:*:*:*",
              "matchCriteriaId": "BC6305FE-E727-4B3E-9ABA-3A57CA4BDB68",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:macintosh:*:*:*:*:*",
              "matchCriteriaId": "09A830AF-2C6C-4FED-8470-FBC58749C8DE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:netware:*:*:*:*:*",
              "matchCriteriaId": "D87CE17C-356A-44AB-84D8-789264B9724D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:solaris:*:*:*:*:*",
              "matchCriteriaId": "42C50C18-54D8-45AD-A4BA-313555A5BAAC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:tru64:*:*:*:*:*",
              "matchCriteriaId": "A40F2EDB-2D61-4DFE-993E-220C3C420408",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:windows:*:*:*:*:*",
              "matchCriteriaId": "E927DA83-2F4A-4915-871D-B79D4B9A1FDD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_arcserve_backup_hp:11.1:*:hp:*:*:*:*:*",
              "matchCriteriaId": "68CB2B8F-1915-41E5-9DC8-BC5F563C959D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10:*:solaris:*:*:*:*:*",
              "matchCriteriaId": "D4206807-8040-4F50-94E4-232482145F6B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "937AD0E8-1FA8-4246-9CDD-5DBC902D2052",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.0:*:aix:*:*:*:*:*",
              "matchCriteriaId": "F7731D14-3789-43BB-846F-B430306E4876",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.0:*:hpux:*:*:*:*:*",
              "matchCriteriaId": "721D1ABA-8F88-4390-BD84-F40F2DAC75A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.0:*:mainframe_linux:*:*:*:*:*",
              "matchCriteriaId": "69AFA92B-1360-4EA3-A6C0-AE3BA5702965",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "78AA54EA-DAF1-4635-AA1B-E2E49C4BB597",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:aix:*:*:*:*:*",
              "matchCriteriaId": "061B6EAA-48D5-4937-801E-4A38E1B59F5F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:hp:*:*:*:*:*",
              "matchCriteriaId": "3644670B-9CC9-4772-A6F6-81B37FB632B8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:solaris:*:*:*:*:*",
              "matchCriteriaId": "C020DAC4-70B5-480D-BB4D-825E3FCB902C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:tru64:*:*:*:*:*",
              "matchCriteriaId": "89DE1848-0A85-4B5C-8FAD-424DE9091A4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:windows:*:*:*:*:*",
              "matchCriteriaId": "D1257789-97D6-4D31-96BE-3A9073D98A73",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260."
    }
  ],
  "id": "CVE-2005-2535",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-08-10T04:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://archives.neohapsis.com/archives/bugtraq/2005-02/0123.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://archives.neohapsis.com/archives/bugtraq/2005-02/0141.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://archives.neohapsis.com/archives/bugtraq/2005-02/0201.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/14293"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/966880"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.osvdb.org/13814"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/12536"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?ID=32478"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19320"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://archives.neohapsis.com/archives/bugtraq/2005-02/0123.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://archives.neohapsis.com/archives/bugtraq/2005-02/0141.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://archives.neohapsis.com/archives/bugtraq/2005-02/0201.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/14293"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/966880"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.osvdb.org/13814"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/12536"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?ID=32478"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19320"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.