Stack-based Buffer Overflow in Symantec Veritas NetBackup
CVE-2006-6222

Currently unrated

Key Information:

Vendor
Symantec
Status
Veritas Netbackup Server
Veritas Netbackup Enterprise Server
Veritas Netbackup Client
Vendor
CVE Published:
14 December 2006

Summary

The NetBackup bpcd daemon in Symantec Veritas NetBackup is vulnerable due to a stack-based buffer overflow. This flaw allows remote attackers to send specially crafted requests with a malformed length prefix, potentially leading to the execution of arbitrary code on vulnerable systems. Affected versions include NetBackup 5.0 prior to 5.0_MP7, 5.1 prior to 5.1_MP6, and 6.0 prior to 6.0_MP4.

References

http://www.zerodayinitiative.com/advisories/ZDI-06-049.html
x_refsource_MISC
http://www.kb.cert.org/vuls/id/607312
third-party-advisoryx_refsource_CERT-VN
http://secunia.com/advisories/23368
third-party-advisoryx_refsource_SECUNIA

EPSS Score

38% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.