PT-2006-6497 · Symantec Veritas · Netbackup

Sebastian Apelt · Published 2006-12-14 · Updated 2018-10-17 · CVE-2006-5822

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Symantec Veritas NetBackup versions 5.0 through 5.0 before MP7 Symantec Veritas NetBackup versions 5.1 through 5.1 before MP6 Symantec Veritas NetBackup versions 6.0 through 6.0 before MP4

Description: A stack-based buffer overflow issue exists in the NetBackup bpcd daemon, allowing remote attackers to execute arbitrary code via a long CONNECT OPTIONS request.

Recommendations: For Symantec Veritas NetBackup versions 5.0 through 5.0 before MP7, update to version 5.0 MP7 or later. For Symantec Veritas NetBackup versions 5.1 through 5.1 before MP6, update to version 5.1 MP6 or later. For Symantec Veritas NetBackup versions 6.0 through 6.0 before MP4, update to version 6.0 MP4 or later.

Fix

Related Identifiers

CVE-2006-5822

Affected Products

Netbackup

References · 10

• http://kb.cert.org/vuls/id/650432 · Patch
• http://secunia.com/advisories/23368 · Vendor Advisory
• http://securityfocus.com/bid/21565 · Patch
• http://symantec.com/avcenter/security/Content/2006.12.13a.html · Patch
• http://zerodayinitiative.com/advisories/ZDI-06-050.html · Vendor Advisory
• http://securitytracker.com/id?1017379 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-5822 · Security Note
• http://securityfocus.com/archive/1/454314/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30883 · Note
• http://vupen.com/english/advisories/2006/4999 · Note