CVE-2005-1272
Estado: ModificadaAlta (7.5)—
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 66%
- Percentil entre todas las CVEs puntuadas: 99
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- NVD-CWE-Other
Referencias
- http://www.idefense.com/application/poi/display?id=287&type=vulnerabilities&flashstatus=true
- http://www.kb.cert.org/vuls/id/279774
- http://www.securityfocus.com/bid/14453
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21656
- http://www.idefense.com/application/poi/display?id=287&type=vulnerabilities&flashstatus=true
- http://www.kb.cert.org/vuls/id/279774
- http://www.securityfocus.com/bid/14453
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21656
JSON original (NVD)
Mostrar
{
"id": "CVE-2005-1272",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": true,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2005-08-05T04:00:00.000",
"references": [
{
"url": "http://www.idefense.com/application/poi/display?id=287&type=vulnerabilities&flashstatus=true",
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/279774",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/14453",
"tags": [
"Exploit",
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33239",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21656",
"source": "cve@mitre.org"
},
{
"url": "http://www.idefense.com/application/poi/display?id=287&type=vulnerabilities&flashstatus=true",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/279774",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/14453",
"tags": [
"Exploit",
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33239",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21656",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port (1) 6070 or (2) 6050."
},
{
"lang": "es",
"value": "Desbordamiento de búfer en Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 permite que atacantes remotos ejecuten código arbitrario mediante el envío de una cadena larga al puerto 6070 ó 6050."
}
],
"lastModified": "2026-06-16T22:12:45.680",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "937AD0E8-1FA8-4246-9CDD-5DBC902D2052"
},
{
"criteria": "cpe:2.3:a:broadcom:brightstor_enterprise_backup:10.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78AA54EA-DAF1-4635-AA1B-E2E49C4BB597"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup:9.0.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFA805A6-4507-4063-A30D-4BE9B6CA5040"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup:9.0_1:*:oracle:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "590FC2F4-DEF9-43B5-9FE5-4B28C9BA393C"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:*:oracle:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0F75ADA-8761-4672-901B-A3D41B5138B0"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup:11.0:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D231F28B-F0CC-4B46-801F-E86A371C814B"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:oracle:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76B1841C-ECFC-42D5-914F-0B19EB437CDE"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup:11.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E11A387-BF4A-4A54-8F29-37EFF14D72DD"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:9.0.1:*:exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2355FC94-DC88-4759-959C-BCD037271D15"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:9.0.1:*:sap:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2679DEE2-A318-4319-BB0E-824B6DE03A5B"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:9.0.1:*:sql:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D09C368-72B3-4065-A4A5-064595CFC5E1"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:11:*:exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E007AC1-E84F-4D05-838B-EF317FF455E7"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:11.0:*:sap:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86BCE53E-EE56-4370-8C2A-39D3A4083BB0"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:11.0:*:sql:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8D21407-0C60-4598-87D4-1386E4C20E0B"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:11.1:*:exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE8E44C1-250D-4BCE-8F72-4B19D12B4D0D"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:11.1:*:sap:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CB10448-1451-4BB8-9D9C-46A7CE947FF1"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_arcserve_backup_agent:11.1:*:sql:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C80D603-C650-465E-A9FD-34BA6E36335A"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_enterprise_backup_agent:10.0:*:oracle:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E53DF21C-D2C0-4982-A02E-3E0D6164F9FD"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_enterprise_backup_agent:10.0:*:sap:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF691595-496E-4024-BB46-B36BB369E8AF"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_enterprise_backup_agent:10.0:*:sql:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "025B5168-F250-4541-ADAC-46395E58D89C"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_enterprise_backup_agent:10.5:*:oracle:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59089180-9FCC-4048-85E6-24C260736A29"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_enterprise_backup_agent:10.5:*:sap:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17445E00-10FF-4BB6-9FA9-9C68444B8ABD"
},
{
"criteria": "cpe:2.3:a:ca:brightstor_enterprise_backup_agent:10.5:*:sql:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "897538FC-F1C7-4834-B45E-0B9EF5A609FE"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}