CVE-2006-4902: Critical severity symantec veritas netbackup server vulnerability
The NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0MP7, 5.1 before 5.1MP6, and 6.0 before 6.0MP4 does not properly check for chained commands, which allows remote attackers to execute arbitrary commands by appending malicious commands to valid commands.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4902?
CVE-2006-4902 has been classified with a high severity rating due to its potential for remote code execution.
How do I fix CVE-2006-4902?
To fix CVE-2006-4902, upgrade Symantec Veritas NetBackup to version 5.0_MP7, 5.1_MP6, or 6.0_MP4 or later.
Which Symantec products are vulnerable to CVE-2006-4902?
The vulnerable products include Symantec Veritas NetBackup versions 5.0, 5.1, and 6.0 prior to the specified patches.
Can attackers exploit CVE-2006-4902 remotely?
Yes, attackers can exploit CVE-2006-4902 remotely by appending malicious commands to valid commands sent to the NetBackup bpcd daemon.
What type of attack is associated with CVE-2006-4902?
CVE-2006-4902 is associated with command injection attacks that can lead to arbitrary command execution.