CVE-2005-2535

Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

80.87% chance of exploitation in the next 30 days, 100th percentile

Published

2005-08-10

Updated

2024-08-07

Proof-of-concept exploits (3)

• http://archives.neohapsis.com/archives/bugtraq/2005-02/0123.html
• http://archives.neohapsis.com/archives/bugtraq/2005-02/0201.html
• http://archives.neohapsis.com/archives/bugtraq/2005-02/0141.html

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/discovery_tcp…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16408
• https://www.exploit-db.com/exploits/815

References

• CVE Record
• NVD entry

Related

• CVE-2005-2523
• CVE-2005-2539
• CVE-2005-2508
• CVE-2005-2540
• CVE-2005-2488
• CVE-2005-2542