CVE-2006-6379: Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Back...

Security readout for executives and security teams

This is a legacy CA BrightStor/ARCserve backup-service vulnerability. A remote attacker could potentially take control of affected backup servers through a buffer overflow in the Discovery Service. Backup systems often hold sensitive data and privileged access, so confirmed exposure should be treated as business-impacting even though current exploitation evidence is not provided. Exposure is most likely in environments still running legacy CA BrightStor or ARCserve backup components, especially where Discovery Service is reachable beyond trusted backup-management networks. Prioritize this if legacy CA backup software remains in production. The affected systems may protect high-value data, and remote code execution on backup infrastructure can materially affect recovery, confidentiality, and operational resilience. Mitigation focus: Inventory CA BrightStor, ARCserve, Enterprise Backup, and Server Protection Suite installations.; Check CA or Broadcom guidance for fixed versions or supported mitigations.; Restrict Discovery Service access to trusted backup-management networks only..

Prepared

Jun 29, 2026, 08:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.