CVE-2005-2535: Broadcom Arcserve Backup 2000

High severity, CVSS 7.5. EPSS: 80.9% chance of exploitation in the next 30 days.

Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary commands via a large packet to TCP port 41523, a different vulnerability than CVE-2005-0260.

Affected products

• Broadcom Arcserve Backup 2000: version r16.5 only
• Broadcom Brightstor Arcserve Backup: version 7.0 only; version 9.0 only; version 9.0.1 only; version 11.0 only; version 11.1 only
• Broadcom Brightstor Arcserve Backup HP: version 11.1 only
• Broadcom Brightstor Enterprise Backup: version 10 only; version 10.0 only; version 10.5 only

Published 2005-08-10. Last modified 2026-06-16.