PT-2006-6852 · Symantec Veritas · Netbackup

Sebastian Apelt · Published 2006-12-14 · Updated 2018-10-17 · CVE-2006-6222

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Veritas NetBackup versions 5.0 through 5.0 before MP7 Symantec Veritas NetBackup versions 5.1 through 5.1 before MP6 Symantec Veritas NetBackup versions 6.0 through 6.0 before MP4

Description A stack-based buffer overflow issue exists in the NetBackup bpcd daemon, allowing remote attackers to execute arbitrary code via a long request with a malformed length prefix.

Recommendations For Symantec Veritas NetBackup versions 5.0 through 5.0 before MP7, update to version 5.0 MP7 or later. For Symantec Veritas NetBackup versions 5.1 through 5.1 before MP6, update to version 5.1 MP6 or later. For Symantec Veritas NetBackup versions 6.0 through 6.0 before MP4, update to version 6.0 MP4 or later.

Fix

Related Identifiers

CVE-2006-6222

Affected Products

Netbackup

References · 12

• http://kb.cert.org/vuls/id/607312 · Patch
• http://symantec.com/avcenter/security/Content/2006.12.13a.html · Patch
• http://zerodayinitiative.com/advisories/ZDI-06-049.html · Vendor Advisory
• http://secunia.com/advisories/23368 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6222 · Security Note
• http://securitytracker.com/id?1017379 · Patch
• http://securityfocus.com/bid/21565 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30883 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30882 · Note
• http://vupen.com/english/advisories/2006/4999 · Note
• http://securityreason.com/securityalert/2033 · Note
• http://securityfocus.com/archive/1/454313/100/0/threaded · Note