Vulnerability-Lookup

CERTA-2006-AVI-128

Vulnerability from certfr_avis - Published: - Updated:

Plusieurs vulnérabilités se trouvent dans les produits Veritas NetBackup. Celles-ci peuvent être utilisées par un utilisateur malveillant dans le but d'accéder à distance au système.

Description

Plusieurs vulnérabilités de type débordement de mémoire ont été trouvées dans l'ensemble des produits de stockage et d'archivage Veritas NetBackup. Elles concernent trois services communs à une grande majorité des produits, à savoir : vmd, bpdbm et bpspsserver. Un utilisateur malveillant peut envoyer des paquets utilisant ses vulnérabilités, afin de gagner accès au système.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les versions Symantec NetBackup affectées sont :

NetBackup Enterprise (client et serveur) 6.0
NetBackup Enterprise (client et serveur) 5.1
NetBackup Enterprise (client et serveur) 5.0
NetBackup (client et serveur) 6.0
NetBackup (client et serveur) 5.1
NetBackup (client et serveur) 5.0
NetBackup DataCenter et BusinesServer (client et serveur) 4.5FP
NetBackup DataCenter et BusinesServer (client et serveur) 4.5MP

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de Sécurité Symantec	None	vendor-advisory
Bulletin de sécurité SYM06-006 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eLes versions Symantec NetBackup affect\u00e9es sont :\u003c/P\u003e  \u003cUL\u003e    \u003cLI\u003eNetBackup Enterprise (client et serveur) 6.0\u003c/LI\u003e    \u003cLI\u003eNetBackup Enterprise (client et serveur) 5.1\u003c/LI\u003e    \u003cLI\u003eNetBackup Enterprise (client et serveur) 5.0\u003c/LI\u003e    \u003cLI\u003eNetBackup (client et serveur) 6.0\u003c/LI\u003e    \u003cLI\u003eNetBackup (client et serveur) 5.1\u003c/LI\u003e    \u003cLI\u003eNetBackup (client et serveur) 5.0\u003c/LI\u003e    \u003cLI\u003eNetBackup DataCenter et BusinesServer (client et serveur)    4.5FP\u003c/LI\u003e    \u003cLI\u003eNetBackup DataCenter et BusinesServer (client et serveur)    4.5MP\u003c/LI\u003e  \u003c/UL\u003e",
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s de type d\u00e9bordement de m\u00e9moire ont \u00e9t\u00e9 trouv\u00e9es\ndans l\u0027ensemble des produits de stockage et d\u0027archivage Veritas\nNetBackup. Elles concernent trois services communs \u00e0 une grande majorit\u00e9\ndes produits, \u00e0 savoir : vmd, bpdbm et bpspsserver. Un utilisateur\nmalveillant peut envoyer des paquets utilisant ses vuln\u00e9rabilit\u00e9s, afin\nde gagner acc\u00e8s au syst\u00e8me.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2006-0991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0991"
    },
    {
      "name": "CVE-2006-0989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0989"
    },
    {
      "name": "CVE-2006-0990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-0990"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 SYM06-006 :",
      "url": "http://seer.support.veritas.com/docs/281521.htm"
    }
  ],
  "reference": "CERTA-2006-AVI-128",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-03-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s se trouvent dans les produits Veritas\nNetBackup. Celles-ci peuvent \u00eatre utilis\u00e9es par un utilisateur\nmalveillant dans le but d\u0027acc\u00e9der \u00e0 distance au syst\u00e8me.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s de Symantec Veritas NetBackup",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de S\u00e9curit\u00e9 Symantec",
      "url": null
    }
  ]
}

CVE-2006-0990 (GCVE-0-2006-0990)

Vulnerability from cvelistv5 – Published: 2006-03-28 00:00 – Updated: 2024-08-07 16:56

Summary

Stack-based buffer overflow in the NetBackup Catalog daemon (bpdbm) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://securitytracker.com/id?1015832	vdb-entryx_refsource_SECTRACK
	http://www.securityfocus.com/bid/17264	vdb-entryx_refsource_BID
	http://seer.support.veritas.com/docs/281521.htm	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/428992/100…	mailing-listx_refsource_BUGTRAQ
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://secunia.com/advisories/19417	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2006/1124	vdb-entryx_refsource_VUPEN
	http://www.kb.cert.org/vuls/id/744137	third-party-advisoryx_refsource_CERT-VN
	http://securityreason.com/securityalert/642	third-party-advisoryx_refsource_SREASON
	http://securityresponse.symantec.com/avcenter/sec…	x_refsource_CONFIRM
	http://www.zerodayinitiative.com/advisories/ZDI-0…	x_refsource_MISC
	http://www.securityfocus.com/archive/1/428988/100…	mailing-listx_refsource_BUGTRAQ

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:56:15.453Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1015832",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015832"
          },
          {
            "name": "17264",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17264"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://seer.support.veritas.com/docs/281521.htm"
          },
          {
            "name": "20060327 SYM06-006, Veritas NetBackup: Multiple Overflow Vulnerabilities in NetBackup Daemons",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428992/100/0/threaded"
          },
          {
            "name": "netbackup-bpdbm-sprintf-bo(25472)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25472"
          },
          {
            "name": "19417",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19417"
          },
          {
            "name": "ADV-2006-1124",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1124"
          },
          {
            "name": "VU#744137",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/744137"
          },
          {
            "name": "642",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/642"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-006.html"
          },
          {
            "name": "20060327 ZDI-06-006: Symantec VERITAS NetBackup Database Manager Buffer Overflow",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428988/100/0/threaded"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-03-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in the NetBackup Catalog daemon (bpdbm) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1015832",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015832"
        },
        {
          "name": "17264",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17264"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://seer.support.veritas.com/docs/281521.htm"
        },
        {
          "name": "20060327 SYM06-006, Veritas NetBackup: Multiple Overflow Vulnerabilities in NetBackup Daemons",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/428992/100/0/threaded"
        },
        {
          "name": "netbackup-bpdbm-sprintf-bo(25472)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25472"
        },
        {
          "name": "19417",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19417"
        },
        {
          "name": "ADV-2006-1124",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1124"
        },
        {
          "name": "VU#744137",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/744137"
        },
        {
          "name": "642",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/642"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-006.html"
        },
        {
          "name": "20060327 ZDI-06-006: Symantec VERITAS NetBackup Database Manager Buffer Overflow",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/428988/100/0/threaded"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0990",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in the NetBackup Catalog daemon (bpdbm) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1015832",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015832"
            },
            {
              "name": "17264",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17264"
            },
            {
              "name": "http://seer.support.veritas.com/docs/281521.htm",
              "refsource": "CONFIRM",
              "url": "http://seer.support.veritas.com/docs/281521.htm"
            },
            {
              "name": "20060327 SYM06-006, Veritas NetBackup: Multiple Overflow Vulnerabilities in NetBackup Daemons",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/428992/100/0/threaded"
            },
            {
              "name": "netbackup-bpdbm-sprintf-bo(25472)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25472"
            },
            {
              "name": "19417",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19417"
            },
            {
              "name": "ADV-2006-1124",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1124"
            },
            {
              "name": "VU#744137",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/744137"
            },
            {
              "name": "642",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/642"
            },
            {
              "name": "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html",
              "refsource": "CONFIRM",
              "url": "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-06-006.html",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-006.html"
            },
            {
              "name": "20060327 ZDI-06-006: Symantec VERITAS NetBackup Database Manager Buffer Overflow",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/428988/100/0/threaded"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-0990",
    "datePublished": "2006-03-28T00:00:00",
    "dateReserved": "2006-03-03T00:00:00",
    "dateUpdated": "2024-08-07T16:56:15.453Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-0991 (GCVE-0-2006-0991)

Vulnerability from cvelistv5 – Published: 2006-03-28 00:00 – Updated: 2024-08-07 16:56

Summary

Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to execute arbitrary code via crafted "Request Service" packets to the vnetd service (TCP port 13724).

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://securitytracker.com/id?1015832	vdb-entryx_refsource_SECTRACK
	http://www.securityfocus.com/bid/17264	vdb-entryx_refsource_BID
	http://seer.support.veritas.com/docs/281521.htm	x_refsource_CONFIRM
	http://secunia.com/advisories/19417	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2006/1124	vdb-entryx_refsource_VUPEN
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://securityresponse.symantec.com/avcenter/sec…	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/428979/100…	mailing-listx_refsource_BUGTRAQ
	http://www.tippingpoint.com/security/advisories/T…	x_refsource_MISC
	http://www.kb.cert.org/vuls/id/377441	third-party-advisoryx_refsource_CERT-VN

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:56:14.482Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1015832",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015832"
          },
          {
            "name": "17264",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17264"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://seer.support.veritas.com/docs/281521.htm"
          },
          {
            "name": "19417",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19417"
          },
          {
            "name": "ADV-2006-1124",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1124"
          },
          {
            "name": "netbackup-vnetd-bo(25473)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25473"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html"
          },
          {
            "name": "20060327 TSRT-06-01: Symantec VERITAS NetBackup vnetd Buffer Overflow Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428979/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.tippingpoint.com/security/advisories/TSRT-06-01.html"
          },
          {
            "name": "VU#377441",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/377441"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-03-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to execute arbitrary code via crafted \"Request Service\" packets to the vnetd service (TCP port 13724)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1015832",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015832"
        },
        {
          "name": "17264",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17264"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://seer.support.veritas.com/docs/281521.htm"
        },
        {
          "name": "19417",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19417"
        },
        {
          "name": "ADV-2006-1124",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1124"
        },
        {
          "name": "netbackup-vnetd-bo(25473)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25473"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html"
        },
        {
          "name": "20060327 TSRT-06-01: Symantec VERITAS NetBackup vnetd Buffer Overflow Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/428979/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.tippingpoint.com/security/advisories/TSRT-06-01.html"
        },
        {
          "name": "VU#377441",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/377441"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0991",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to execute arbitrary code via crafted \"Request Service\" packets to the vnetd service (TCP port 13724)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1015832",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015832"
            },
            {
              "name": "17264",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17264"
            },
            {
              "name": "http://seer.support.veritas.com/docs/281521.htm",
              "refsource": "CONFIRM",
              "url": "http://seer.support.veritas.com/docs/281521.htm"
            },
            {
              "name": "19417",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19417"
            },
            {
              "name": "ADV-2006-1124",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1124"
            },
            {
              "name": "netbackup-vnetd-bo(25473)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25473"
            },
            {
              "name": "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html",
              "refsource": "CONFIRM",
              "url": "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html"
            },
            {
              "name": "20060327 TSRT-06-01: Symantec VERITAS NetBackup vnetd Buffer Overflow Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/428979/100/0/threaded"
            },
            {
              "name": "http://www.tippingpoint.com/security/advisories/TSRT-06-01.html",
              "refsource": "MISC",
              "url": "http://www.tippingpoint.com/security/advisories/TSRT-06-01.html"
            },
            {
              "name": "VU#377441",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/377441"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-0991",
    "datePublished": "2006-03-28T00:00:00",
    "dateReserved": "2006-03-03T00:00:00",
    "dateUpdated": "2024-08-07T16:56:14.482Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-0989 (GCVE-0-2006-0989)

Vulnerability from cvelistv5 – Published: 2006-03-28 00:00 – Updated: 2024-08-07 16:56

Summary

Stack-based buffer overflow in the volume manager daemon (vmd) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://securitytracker.com/id?1015832	vdb-entryx_refsource_SECTRACK
	http://www.securityfocus.com/bid/17264	vdb-entryx_refsource_BID
	http://seer.support.veritas.com/docs/281521.htm	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2006/1124	vdb-entryx_refsource_VUPEN
	http://securityresponse.symantec.com/avcenter/sec…	x_refsource_CONFIRM
	http://www.kb.cert.org/vuls/id/880801	third-party-advisoryx_refsource_CERT-VN
	http://www.osvdb.org/24172	vdb-entryx_refsource_OSVDB
	http://www.zerodayinitiative.com/advisories/ZDI-0…	x_refsource_MISC
	http://www.securityfocus.com/archive/1/428944/100…	mailing-listx_refsource_BUGTRAQ
	http://securityreason.com/securityalert/639	third-party-advisoryx_refsource_SREASON
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:56:15.519Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1015832",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015832"
          },
          {
            "name": "17264",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17264"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://seer.support.veritas.com/docs/281521.htm"
          },
          {
            "name": "ADV-2006-1124",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1124"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html"
          },
          {
            "name": "VU#880801",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/880801"
          },
          {
            "name": "24172",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24172"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-005.html"
          },
          {
            "name": "20060327 ZDI-06-005: Symantec VERITAS NetBackup Volume Manager Buffer Overflow",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428944/100/0/threaded"
          },
          {
            "name": "639",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/639"
          },
          {
            "name": "netbackup-vmd-sscanf-bo(25471)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25471"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-03-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in the volume manager daemon (vmd) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1015832",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015832"
        },
        {
          "name": "17264",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17264"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://seer.support.veritas.com/docs/281521.htm"
        },
        {
          "name": "ADV-2006-1124",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1124"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html"
        },
        {
          "name": "VU#880801",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/880801"
        },
        {
          "name": "24172",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24172"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-005.html"
        },
        {
          "name": "20060327 ZDI-06-005: Symantec VERITAS NetBackup Volume Manager Buffer Overflow",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/428944/100/0/threaded"
        },
        {
          "name": "639",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/639"
        },
        {
          "name": "netbackup-vmd-sscanf-bo(25471)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25471"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0989",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in the volume manager daemon (vmd) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1015832",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015832"
            },
            {
              "name": "17264",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17264"
            },
            {
              "name": "http://seer.support.veritas.com/docs/281521.htm",
              "refsource": "CONFIRM",
              "url": "http://seer.support.veritas.com/docs/281521.htm"
            },
            {
              "name": "ADV-2006-1124",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1124"
            },
            {
              "name": "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html",
              "refsource": "CONFIRM",
              "url": "http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html"
            },
            {
              "name": "VU#880801",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/880801"
            },
            {
              "name": "24172",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24172"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-06-005.html",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-005.html"
            },
            {
              "name": "20060327 ZDI-06-005: Symantec VERITAS NetBackup Volume Manager Buffer Overflow",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/428944/100/0/threaded"
            },
            {
              "name": "639",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/639"
            },
            {
              "name": "netbackup-vmd-sscanf-bo(25471)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25471"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-0989",
    "datePublished": "2006-03-28T00:00:00",
    "dateReserved": "2006-03-03T00:00:00",
    "dateUpdated": "2024-08-07T16:56:15.519Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTA-2006-AVI-128

Description

Solution

CVE-2006-0990 (GCVE-0-2006-0990)

CVE-2006-0991 (GCVE-0-2006-0991)

CVE-2006-0989 (GCVE-0-2006-0989)

Tags

Sightings

Nomenclature