7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
0.713 High
EPSS
Percentile
97.7%
Added: 04/14/2006
CVE: CVE-2006-0991
BID: 17264
OSVDB: 24170
VERITAS NetBackup is a backup and recovery solution for multiple platforms.
A buffer overflow in **bpspsserver**
allows a remote attacker to execute arbitrary commands by sending a specially crafted Request Service message to the **vnetd**
service.
Apply the update referenced in Symantec Advisory SYM06-006.
<http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1641.html>
Exploit works on VERITAS NetBackup 6.0.
Windows XP