PT-2006-2028 · Veritas · Netbackup Enterprise Server+2

Sebastian Apelt · Published 2006-03-28 · Updated 2018-10-18 · CVE-2006-0990

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Veritas NetBackup Enterprise Server versions 5.0 through 6.0 Veritas NetBackup DataCenter versions 4.5FP Veritas NetBackup BusinesServer versions 4.5MP

Description A stack-based buffer overflow issue exists in the NetBackup Catalog daemon (bpdbm) that allows attackers to execute arbitrary code via unknown vectors.

Recommendations For Veritas NetBackup Enterprise Server versions 5.0 through 6.0, update to a version outside of this range to resolve the issue. For Veritas NetBackup DataCenter version 4.5FP, update to a version outside of this range to resolve the issue. For Veritas NetBackup BusinesServer version 4.5MP, update to a version outside of this range to resolve the issue.

Fix

Related Identifiers

CVE-2006-0990

Affected Products

Netbackup Businesserver

Netbackup Datacenter

Netbackup Enterprise Server

References · 13

• http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-0990 · Security Note
• http://seer.support.veritas.com/docs/281521.htm · Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-06-006.html · Note
• http://securityfocus.com/archive/1/428992/100/0/threaded · Note
• http://securityfocus.com/archive/1/428988/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/1124 · Note
• http://securityreason.com/securityalert/642 · Note
• http://secunia.com/advisories/19417 · Note
• http://kb.cert.org/vuls/id/744137 · Note
• http://securityfocus.com/bid/17264 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25472 · Note
• http://securitytracker.com/id?1015832 · Note