CVE-2006-6222
Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 allows remote attackers to execute arbitrary code via a long request with a malformed length prefix.
Desbordamiento de búfer basado en pila en el demonio NetBackup bpcd (bpcd.exe) en Symantec Veritas NetBackup 5.0 versiones anteriores a 5.0_MP7, 5.1 versiones anteriores a 5.1_MP6, y 6.0 versiones anteriores a 6.0_MP4, permite a atacantes remotos ejecutar código de su elección mediante una petición larga con una longitud de prefijo malformada.
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Symantec Veritas NetBackup. Authentication is not required to exploit this vulnerability.
The specific flaw exists within bpcd.exe during the parsing of overly long requests to a NetBackup Master/Media Server. Communications to this process are prefixed with a length, which, if malformed can result in a stack based buffer overflow. Exploitation of this vulnerability can lead to complete system compromise.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2006-12-01 CVE Reserved
- 2006-12-13 CVE Published
- 2024-08-07 CVE Updated
- 2024-08-19 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://securityreason.com/securityalert/2033 | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/454313/100/0/threaded | Mailing List | |
| http://www.vupen.com/english/advisories/2006/4999 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/30882 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/30883 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/23368 | 2018-10-17 | |
| http://securitytracker.com/id?1017379 | 2018-10-17 | |
| http://www.kb.cert.org/vuls/id/607312 | 2018-10-17 | |
| http://www.securityfocus.com/bid/21565 | 2018-10-17 | |
| http://www.symantec.com/avcenter/security/Content/2006.12.13a.html | 2018-10-17 |
| URL | Date | SRC |
|---|---|---|
| http://www.zerodayinitiative.com/advisories/ZDI-06-049.html | 2018-10-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Veritas Netbackup Client Search vendor "Symantec" for product "Veritas Netbackup Client" | 5.0 Search vendor "Symantec" for product "Veritas Netbackup Client" and version "5.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Client Search vendor "Symantec" for product "Veritas Netbackup Client" | 5.1 Search vendor "Symantec" for product "Veritas Netbackup Client" and version "5.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Client Search vendor "Symantec" for product "Veritas Netbackup Client" | 6.0 Search vendor "Symantec" for product "Veritas Netbackup Client" and version "6.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Enterprise Server Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" | 5.0 Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" and version "5.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Enterprise Server Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" | 5.1 Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" and version "5.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Enterprise Server Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" | 6.0 Search vendor "Symantec" for product "Veritas Netbackup Enterprise Server" and version "6.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Server Search vendor "Symantec" for product "Veritas Netbackup Server" | 5.0 Search vendor "Symantec" for product "Veritas Netbackup Server" and version "5.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Server Search vendor "Symantec" for product "Veritas Netbackup Server" | 5.1 Search vendor "Symantec" for product "Veritas Netbackup Server" and version "5.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Veritas Netbackup Server Search vendor "Symantec" for product "Veritas Netbackup Server" | 6.0 Search vendor "Symantec" for product "Veritas Netbackup Server" and version "6.0" | - |
Affected
| ||||||