--- title: "CVE-2006-5143: Multiple buffer overflows in CA BrightStor… | CubePath" description: "Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor…" language: en source: https://cubepath.com/security/cve/CVE-2006-5143 --- # CVE-2006-5143: Multiple buffer overflows in CA BrightStor… | CubePath ## Description Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via crafted data on TCP port 6071 to the Backup Agent RPC Server (DBASVR.exe) using the RPC routines with opcode (1) 0x01, (2) 0x02, or (3) 0x18; invalid stub data on TCP port 6503 to the RPC routines with opcode (4) 0x2b or (5) 0x2d in ASCORE.dll in the Message Engine RPC Server (msgeng.exe); (6) a long hostname on TCP port 41523 to ASBRDCST.DLL in the Discovery Service (casdscsvc.exe); or unspecified vectors related to the (7) Job Engine Service. Official description from the CVE record, published by mitre. Copyright © 1999-2026 The MITRE Corporation. See [/security/cve/legal](https://cubepath.com/security/cve/legal) for the CVE license. [View the record on cve.org](https://www.cve.org/CVERecord?id=CVE-2006-5143) ## Key data ### EPSS Exploit Prediction Scoring System by FIRST: an estimate of the probability that exploitation activity will be observed in the next 30 days. Score 0.79407 (79.4% probability) Percentile 99.6% Scores of Nov 10, 2026 Model v2026.06.15 ## References Links listed in the CVE record. They lead to other sites, which CubePath does not control. - [20061005 TSRT-06-11: CA Multiple Product DBASVR RPC Server Multiple Buffer Overflow Vulnerabilities](http://www.securityfocus.com/archive/1/447862/100/100/threaded) (securityfocus.com) mailing-list - [22285](http://secunia.com/advisories/22285) (secunia.com) third-party-advisory - [zerodayinitiative.com/advisories/ZDI-06-031.html](http://www.zerodayinitiative.com/advisories/ZDI-06-031.html) - [lssec.com/advisories/LS-20060330.pdf](http://www.lssec.com/advisories/LS-20060330.pdf) - [ca-dbasvr-rpc-bo(29364)](https://exchange.xforce.ibmcloud.com/vulnerabilities/29364) (exchange.xforce.ibmcloud.com) vdb-entry - [20061007 LS-20060313 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability](http://www.securityfocus.com/archive/1/447930/100/200/threaded) (securityfocus.com) mailing-list - [lssec.com/advisories/LS-20060313.pdf](http://www.lssec.com/advisories/LS-20060313.pdf) - [www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34693](http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34693) - [VU#361792](http://www.kb.cert.org/vuls/id/361792) (kb.cert.org) third-party-advisory - [20061007 LS-20060220 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability](http://www.securityfocus.com/archive/1/447926/100/200/threaded) (securityfocus.com) mailing-list - [1017004](http://securitytracker.com/id?1017004) (securitytracker.com) vdb-entry - [VU#860048](http://www.kb.cert.org/vuls/id/860048) (kb.cert.org) third-party-advisory - [ADV-2006-3930](http://www.vupen.com/english/advisories/2006/3930) (vupen.com) vdb-entry - [lssec.com/advisories/LS-20060220.pdf](http://www.lssec.com/advisories/LS-20060220.pdf) - [www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id…](http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744) - [20365](http://www.securityfocus.com/bid/20365) (securityfocus.com) vdb-entry - [zerodayinitiative.com/advisories/ZDI-06-030.html](http://www.zerodayinitiative.com/advisories/ZDI-06-030.html) - [20061005 ZDI-06-030: CA Multiple Product Discovery Service Remote Buffer Overflow Vulnerability](http://www.securityfocus.com/archive/1/447847/100/200/threaded) (securityfocus.com) mailing-list - [20061007 LS-20060330 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability](http://www.securityfocus.com/archive/1/447927/100/200/threaded) (securityfocus.com) mailing-list - [tippingpoint.com/security/advisories/TSRT-06-11.html](http://www.tippingpoint.com/security/advisories/TSRT-06-11.html) - [1017006](http://securitytracker.com/id?1017006) (securitytracker.com) vdb-entry - [1017003](http://securitytracker.com/id?1017003) (securitytracker.com) vdb-entry - [www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id…](http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id=90744) - [1017005](http://securitytracker.com/id?1017005) (securitytracker.com) vdb-entry - [supportconnectw.ca.com/public/storage/infodocs/basbr-secnot…](http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp) - [20061006 \[CAID 34693, 34694\]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities](http://www.securityfocus.com/archive/1/447839/100/100/threaded) (securityfocus.com) mailing-list - [20061005 ZDI-06-031: CA Multiple Product Message Engine RPC Server Code Execution Vulnerability](http://www.securityfocus.com/archive/1/447848/100/100/threaded) (securityfocus.com) mailing-list ## Timeline 1. ID reserved Oct 2, 2006 2. Record published Oct 6, 2006 3. Record last updated Aug 7, 2024 ## Look up another CVE ## About CubePath CubePath is a cloud provider with data centers in Europe and the United States. It offers VPS, bare metal servers and DDoS protection. [Cloud VPS](https://cubepath.com/vps) [DDoS protection](https://cubepath.com/ddos-protection) Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Data as of Nov 10, 2026, 20:01 UTC. [Sources and licenses](https://cubepath.com/security/cve/legal)