Stack-based Buffer Overflow in Symantec Veritas NetBackup
CVE-2006-6222

Currently unrated

Key Information:

Vendor: Symantec
Status: Veritas Netbackup Server; Veritas Netbackup Enterprise Server; Veritas Netbackup Client
Vendor: CVE Published:; 14 December 2006

What is CVE-2006-6222?

The NetBackup bpcd daemon in Symantec Veritas NetBackup is vulnerable due to a stack-based buffer overflow. This flaw allows remote attackers to send specially crafted requests with a malformed length prefix, potentially leading to the execution of arbitrary code on vulnerable systems. Affected versions include NetBackup 5.0 prior to 5.0_MP7, 5.1 prior to 5.1_MP6, and 6.0 prior to 6.0_MP4.

References

http://www.zerodayinitiative.com/advisories/ZDI-06-049.html

x_refsource_MISC

http://www.kb.cert.org/vuls/id/607312

third-party-advisoryx_refsource_CERT-VN

http://secunia.com/advisories/23368

third-party-advisoryx_refsource_SECUNIA

EPSS Score

38% chance of being exploited in the next 30 days.

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 14, 2006
Vulnerability Reserved
Dec 1, 2006