CVE-2006-4902

Currently unrated

Key Information:

Vendor
Symantec
Status
Veritas Netbackup Server
Veritas Netbackup Enterprise Server
Veritas Netbackup Client
Vendor
CVE Published:
14 December 2006

Summary

The NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 does not properly check for chained commands, which allows remote attackers to execute arbitrary commands by appending malicious commands to valid commands.

References

http://secunia.com/advisories/23368
third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/27638
vdb-entryx_refsource_XF
http://securitytracker.com/id?1017379
vdb-entryx_refsource_SECTRACK

EPSS Score

81% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.