PT-2006-2029 · Veritas · Netbackup

Published 2006-03-28 · Updated 2018-10-18 · CVE-2006-0991

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NetBackup version 6.0 for Windows

Description The issue is related to a buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) that allows remote attackers to execute arbitrary code. This is achieved by sending crafted "Request Service" packets to the vnetd service, which listens on TCP port 13724.

Recommendations For NetBackup version 6.0 for Windows, consider restricting access to the vnetd service on TCP port 13724 until a patch is available. As a temporary workaround, disabling the bpspsserver daemon may help minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-0991

Affected Products

Netbackup

References · 11

• http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-0991 · Security Note
• http://tippingpoint.com/security/advisories/TSRT-06-01.html · Vendor Advisory
• http://vupen.com/english/advisories/2006/1124 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25473 · Note
• http://securityfocus.com/archive/1/428979/100/0/threaded · Note
• http://securitytracker.com/id?1015832 · Note
• http://secunia.com/advisories/19417 · Note
• http://securityfocus.com/bid/17264 · Note
• http://kb.cert.org/vuls/id/377441 · Note
• http://seer.support.veritas.com/docs/281521.htm · Note