CVE-2006-4902
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 does not properly check for chained commands, which allows remote attackers to execute arbitrary commands by appending malicious commands to valid commands.
El demonio NetBackup bpcd (bpcd.exe) en Symantec Veritas NetBackup 5.0 versiones anteriores a 5.0_MP7, 5.1 versiones anteriores a 5.1_MP6, y 6.0 versiones anteriores a 6.0_MP4, no comprueba apropiadamente comandos encadenados, que permite a atacantes remotos ejecutar código de su elección añadiendo comandos maliciosos en comandos validos.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2006-09-20 CVE Reserved
- 2006-12-14 CVE Published
- 2024-08-07 CVE Updated
- 2024-11-03 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://www.iss.net/threats/247.html | Third Party Advisory | |
| http://www.vupen.com/english/advisories/2006/4999 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/27638 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/23368 | 2017-07-20 | |
| http://securitytracker.com/id?1017379 | 2017-07-20 | |
| http://www.kb.cert.org/vuls/id/252936 | 2017-07-20 | |
| http://www.securityfocus.com/bid/21565 | 2017-07-20 | |
| http://www.symantec.com/avcenter/security/Content/2006.12.13a.html | 2017-07-20 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Veritas Netbackup Client Search vendor "Symantec" for product "Veritas Netbackup Client" | 5.0 Search vendor "Symantec" for product "Veritas Netbackup Client" and version "5.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Client Search vendor "Symantec" for product "Veritas Netbackup Client" | 5.1 Search vendor "Symantec" for product "Veritas Netbackup Client" and version "5.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Client Search vendor "Symantec" for product "Veritas Netbackup Client" | 6.0 Search vendor "Symantec" for product "Veritas Netbackup Client" and version "6.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Enterprise Server Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" | 5.0 Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" and version "5.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Enterprise Server Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" | 5.1 Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" and version "5.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Enterprise Server Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" | 6.0 Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" and version "6.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Server Search vendor "Symantec" for product "Veritas Netbackup Server" | 5.0 Search vendor "Symantec" for product "Veritas Netbackup Server" and version "5.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Server Search vendor "Symantec" for product "Veritas Netbackup Server" | 5.1 Search vendor "Symantec" for product "Veritas Netbackup Server" and version "5.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Server Search vendor "Symantec" for product "Veritas Netbackup Server" | 6.0 Search vendor "Symantec" for product "Veritas Netbackup Server" and version "6.0" | - |
Affected
| ||||||