Lucene search

[email protected]CVE-2006-6222

HistoryDec 14, 2006 - 8:28 p.m.

CVE-2006-6222

2006-12-1420:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-6222

symantec

veritas

netbackup

buffer overflow

bpcd daemon

nvd

8.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.879 High

EPSS

Percentile

98.6%

JSON

Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 allows remote attackers to execute arbitrary code via a long request with a malformed length prefix.

CPENameOperatorVersion
symantec:veritas_netbackup_serversymantec veritas netbackup servereq6.0
symantec:veritas_netbackup_serversymantec veritas netbackup servereq5.0
symantec:veritas_netbackup_enterprise_serversymantec veritas netbackup enterprise servereq5.1
symantec:veritas_netbackup_clientsymantec veritas netbackup clienteq5.0
symantec:veritas_netbackup_clientsymantec veritas netbackup clienteq5.1
symantec:veritas_netbackup_enterprise_serversymantec veritas netbackup enterprise servereq6.0
symantec:veritas_netbackup_clientsymantec veritas netbackup clienteq6.0
symantec:veritas_netbackup_serversymantec veritas netbackup servereq5.1
symantec:veritas_netbackup_enterprise_serversymantec veritas netbackup enterprise servereq5.0

CPE	Name	Operator	Version
symantec:veritas_netbackup_server	symantec veritas netbackup server	eq	6.0
symantec:veritas_netbackup_server	symantec veritas netbackup server	eq	5.0
symantec:veritas_netbackup_enterprise_server	symantec veritas netbackup enterprise server	eq	5.1
symantec:veritas_netbackup_client	symantec veritas netbackup client	eq	5.0
symantec:veritas_netbackup_client	symantec veritas netbackup client	eq	5.1
symantec:veritas_netbackup_enterprise_server	symantec veritas netbackup enterprise server	eq	6.0
symantec:veritas_netbackup_client	symantec veritas netbackup client	eq	6.0
symantec:veritas_netbackup_server	symantec veritas netbackup server	eq	5.1
symantec:veritas_netbackup_enterprise_server	symantec veritas netbackup enterprise server	eq	5.0

References

secunia.com/advisories/23368

securityreason.com/securityalert/2033

securitytracker.com/id?1017379

www.kb.cert.org/vuls/id/607312

www.securityfocus.com/archive/1/454313/100/0/threaded

www.securityfocus.com/bid/21565

www.symantec.com/avcenter/security/Content/2006.12.13a.html

www.vupen.com/english/advisories/2006/4999

www.zerodayinitiative.com/advisories/ZDI-06-049.html

exchange.xforce.ibmcloud.com/vulnerabilities/30882

exchange.xforce.ibmcloud.com/vulnerabilities/30883

8.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.879 High

EPSS

Percentile

98.6%

JSON

Related for CVE-2006-6222

securityvulns1 zdi1 checkpoint_advisories1 cert1 cve1