CVE-2005-2535: Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attac...

Security readout for executives and security teams

This is an old remote code execution flaw in BrightStor ARCserve Backup Discovery Service. If legacy versions 9.0 through 11.1 are still reachable, an attacker could potentially take control of the backup server. Backup systems often hold sensitive data and credentials, so exposed instances deserve prompt attention. Exposure is most likely in legacy environments still running BrightStor ARCserve Backup 9.0 through 11.1 with Discovery Service reachable on TCP 41523. Internet exposure would raise urgency, but internal exposure is still material because backup servers are high-value assets. Prioritize remediation for any reachable legacy backup server. The business risk is not just service disruption; compromise of backup infrastructure can expose sensitive data, recovery credentials, and resilience operations. Mitigation focus: Identify any BrightStor ARCserve Backup 9.0 through 11.1 deployments.; Review CA vendor advisory guidance for patches, upgrades, or supported replacements.; Restrict TCP 41523 access to trusted backup management networks only..

Prepared

Jun 29, 2026, 18:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.