CVE-2006-6222

Currently unrated

Key Information:

Vendor
Symantec
Status
Veritas Netbackup Server
Veritas Netbackup Enterprise Server
Veritas Netbackup Client
Vendor
CVE Published:
14 December 2006

Summary

Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 allows remote attackers to execute arbitrary code via a long request with a malformed length prefix.

References

http://www.zerodayinitiative.com/advisories/ZDI-06-049.html
x_refsource_MISC
http://www.kb.cert.org/vuls/id/607312
third-party-advisoryx_refsource_CERT-VN
http://secunia.com/advisories/23368
third-party-advisoryx_refsource_SECUNIA

EPSS Score

85% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.