CVE-2005-2535

high · 7.5

Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.

7.5

CVSS

80.9%

EPSS (exploit prob.)

100th

EPSS percentile

2005-08-10

Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
broadcom	arcserve_backup_2000	r16.5
broadcom	brightstor_arcserve_backup	7.0
broadcom	brightstor_arcserve_backup	9.0
broadcom	brightstor_arcserve_backup	9.0
broadcom	brightstor_arcserve_backup	9.0
broadcom	brightstor_arcserve_backup	9.0.1
broadcom	brightstor_arcserve_backup	11.0
broadcom	brightstor_arcserve_backup	11.1
broadcom	brightstor_arcserve_backup	11.1
broadcom	brightstor_arcserve_backup	11.1
broadcom	brightstor_arcserve_backup	11.1
broadcom	brightstor_arcserve_backup	11.1
broadcom	brightstor_arcserve_backup	11.1
broadcom	brightstor_arcserve_backup	11.1
broadcom	brightstor_arcserve_backup_hp	11.1
broadcom	brightstor_enterprise_backup	10
broadcom	brightstor_enterprise_backup	10.0
broadcom	brightstor_enterprise_backup	10.0
broadcom	brightstor_enterprise_backup	10.0
broadcom	brightstor_enterprise_backup	10.0
broadcom	brightstor_enterprise_backup	10.5
broadcom	brightstor_enterprise_backup	10.5
broadcom	brightstor_enterprise_backup	10.5
broadcom	brightstor_enterprise_backup	10.5
broadcom	brightstor_enterprise_backup	10.5
broadcom	brightstor_enterprise_backup	10.5

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-2535