PT-2006-2027 · Veritas · Veritas Netbackup Enterprise Server+2

Sebastian Apelt · Published 2006-03-28 · Updated 2018-10-18 · CVE-2006-0989

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Veritas NetBackup Enterprise Server versions 5.0 through 6.0 Veritas DataCenter versions 4.5FP Veritas BusinesServer versions 4.5MP

Description A stack-based buffer overflow issue exists in the volume manager daemon (vmd) that allows attackers to execute arbitrary code via unknown vectors.

Recommendations For Veritas NetBackup Enterprise Server versions 5.0 through 6.0, update to a version outside of the affected range to resolve the issue. For Veritas DataCenter versions 4.5FP, update to a version outside of the affected range to resolve the issue. For Veritas BusinesServer versions 4.5MP, update to a version outside of the affected range to resolve the issue.

Fix

Related Identifiers

CVE-2006-0989

Affected Products

Veritas Businessserver

Veritas Datacenter

Veritas Netbackup Enterprise Server

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2006-0989 · Security Note
• http://seer.support.veritas.com/docs/281521.htm · Vendor Advisory
• http://osvdb.org/24172 · Note
• http://zerodayinitiative.com/advisories/ZDI-06-005.html · Note
• http://kb.cert.org/vuls/id/880801 · Note
• http://securityreason.com/securityalert/639 · Note
• http://vupen.com/english/advisories/2006/1124 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25471 · Note
• http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html · Note
• http://securityfocus.com/archive/1/428944/100/0/threaded · Note
• http://securityfocus.com/bid/17264 · Note
• http://securitytracker.com/id?1015832 · Note