PT-2006-2029 · Veritas · Netbackup

Publicado 2006-03-28 · Atualizado 2018-10-18 · CVE-2006-0991

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NetBackup version 6.0 for Windows

Description The issue is related to a buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) that allows remote attackers to execute arbitrary code. This is achieved by sending crafted "Request Service" packets to the vnetd service, which listens on TCP port 13724.

Recommendations For NetBackup version 6.0 for Windows, consider restricting access to the vnetd service on TCP port 13724 until a patch is available. As a temporary workaround, disabling the bpspsserver daemon may help minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-0991

Produtos afetados

Netbackup

Referências · 11

• http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html · Correção
• http://vupen.com/english/advisories/2006/1124 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0991 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25473 · Nota
• http://securityfocus.com/archive/1/428979/100/0/threaded · Nota
• http://securitytracker.com/id?1015832 · Nota
• http://secunia.com/advisories/19417 · Nota
• http://securityfocus.com/bid/17264 · Nota
• http://tippingpoint.com/security/advisories/TSRT-06-01.html · Aviso do Fabricante
• http://kb.cert.org/vuls/id/377441 · Nota
• http://seer.support.veritas.com/docs/281521.htm · Nota