PT-2006-6497 · Symantec Veritas · Netbackup

Sebastian Apelt · Publicado 2006-12-14 · Atualizado 2018-10-17 · CVE-2006-5822

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Symantec Veritas NetBackup versions 5.0 through 5.0 before MP7 Symantec Veritas NetBackup versions 5.1 through 5.1 before MP6 Symantec Veritas NetBackup versions 6.0 through 6.0 before MP4

Description: A stack-based buffer overflow issue exists in the NetBackup bpcd daemon, allowing remote attackers to execute arbitrary code via a long CONNECT OPTIONS request.

Recommendations: For Symantec Veritas NetBackup versions 5.0 through 5.0 before MP7, update to version 5.0 MP7 or later. For Symantec Veritas NetBackup versions 5.1 through 5.1 before MP6, update to version 5.1 MP6 or later. For Symantec Veritas NetBackup versions 6.0 through 6.0 before MP4, update to version 6.0 MP4 or later.

Correção

Identificadores relacionados

CVE-2006-5822

Produtos afetados

Netbackup

Referências · 10

• http://kb.cert.org/vuls/id/650432 · Correção
• http://secunia.com/advisories/23368 · Aviso do Fabricante
• http://securityfocus.com/archive/1/454314/100/0/threaded · Nota
• http://securityfocus.com/bid/21565 · Correção
• http://symantec.com/avcenter/security/Content/2006.12.13a.html · Correção
• http://zerodayinitiative.com/advisories/ZDI-06-050.html · Aviso do Fabricante
• http://securitytracker.com/id?1017379 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-5822 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30883 · Nota
• http://vupen.com/english/advisories/2006/4999 · Nota