CVE-2006-0990: Buffer Overflow

Published Mar 28, 2006

Updated

Stack-based buffer overflow in the NetBackup Catalog daemon (bpdbm) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors.

Affected Software

10 affected components

Veritas NetBackup=4.5.0-fp

Veritas NetBackup=4.5.0-mp

Veritas NetBackup=5.0

Veritas NetBackup=5.1

Veritas NetBackup=6.0

Remediation

Patch Available

http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html

Event History

Mar 28, 2006

CVE Published

12:06 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-0990?

CVE-2006-0990 is considered a high severity vulnerability due to its potential to allow attackers to execute arbitrary code.

How do I fix CVE-2006-0990?

To fix CVE-2006-0990, you should apply the latest patches provided by Veritas for affected versions of NetBackup.

What software is affected by CVE-2006-0990?

CVE-2006-0990 affects Veritas NetBackup versions 4.5 through 6.0, including Enterprise Server and DataCenter editions.

What type of vulnerability is CVE-2006-0990?

CVE-2006-0990 is a stack-based buffer overflow vulnerability that can be exploited to execute arbitrary code.

Is CVE-2006-0990 still a risk for current systems?

CVE-2006-0990 may still pose a risk if affected versions of Veritas NetBackup are in use and not updated.