CVE-2006-5822
Symantec Veritas NetBackup CONNECT_OPTIONS Buffer Overflow Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 allows remote attackers to execute arbitrary code via a long CONNECT_OPTIONS request, a different issue than CVE-2006-6222.
Desbordamiento de búfer basado en pila en el demonio NetBackup bpcd (bpcd.exe) en Symantec Veritas NetBackup 5.0 versiones anteriores a 5.0_MP7, 5.1 versiones anteriores a 5.1_MP6, y 6.0 versiones anteriores a 6.0_MP4, permite a atacantes remotos ejecutar código de su elección mediante una petición larga CONNECT_OPTIONS, vulnerabilidad diferente a CVE-2006-6222.
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Symantec Veritas NetBackup. Authentication is not required to exploit this vulnerability.
The specific flaw exists within bpcd.exe during the parsing of overly long CONNECT_OPTIONS requests to a NetBackup Master/Media Server. When the CONNECT_OPTIONS command is parsed, the contents are copied into a stack allocated buffer without proper length checking. Exploitation of this vulnerability can lead to complete system compromise.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2006-11-08 CVE Reserved
- 2006-12-13 CVE Published
- 2024-08-07 CVE Updated
- 2024-11-03 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/archive/1/454314/100/0/threaded | Mailing List | |
| http://www.vupen.com/english/advisories/2006/4999 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/30883 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/23368 | 2018-10-17 | |
| http://securitytracker.com/id?1017379 | 2018-10-17 | |
| http://www.kb.cert.org/vuls/id/650432 | 2018-10-17 | |
| http://www.securityfocus.com/bid/21565 | 2018-10-17 | |
| http://www.symantec.com/avcenter/security/Content/2006.12.13a.html | 2018-10-17 | |
| http://www.zerodayinitiative.com/advisories/ZDI-06-050.html | 2018-10-17 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Veritas Netbackup Client Search vendor "Symantec" for product "Veritas Netbackup Client" | 5.0 Search vendor "Symantec" for product "Veritas Netbackup Client" and version "5.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Client Search vendor "Symantec" for product "Veritas Netbackup Client" | 5.1 Search vendor "Symantec" for product "Veritas Netbackup Client" and version "5.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Client Search vendor "Symantec" for product "Veritas Netbackup Client" | 6.0 Search vendor "Symantec" for product "Veritas Netbackup Client" and version "6.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Enterprise Server Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" | 5.0 Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" and version "5.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Enterprise Server Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" | 5.1 Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" and version "5.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Enterprise Server Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" | 6.0 Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" and version "6.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Server Search vendor "Symantec" for product "Veritas Netbackup Server" | 5.0 Search vendor "Symantec" for product "Veritas Netbackup Server" and version "5.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Server Search vendor "Symantec" for product "Veritas Netbackup Server" | 5.1 Search vendor "Symantec" for product "Veritas Netbackup Server" and version "5.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Server Search vendor "Symantec" for product "Veritas Netbackup Server" | 6.0 Search vendor "Symantec" for product "Veritas Netbackup Server" and version "6.0" | - |
Affected
| ||||||