CVE-2009-0651: Input Validation
First published: Fri Feb 20 2009(Updated: )
Unspecified vulnerability in the Veritas network daemon (aka vnetd) in Symantec Veritas NetBackup Server / Enterprise Server 5.x, 6.0 before MP7 SP1, and 6.5 before 6.5.3.1 allows remote attackers to execute arbitrary code via unknown vectors related to "initial communications setup."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Veritas NetBackup Server | <=5.1mp7 | |
| Symantec Veritas NetBackup Server | <=6.0mp7 | |
| Symantec Veritas NetBackup Server | <=6.5.2 | |
| Symantec Veritas NetBackup Server | =5.1 | |
| Symantec Veritas NetBackup Server | =6.0 | |
| Symantec Veritas NetBackup Server | =6.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seer.entsupport.symantec.com/docs/317828.htm
- http://secunia.com/advisories/33953
- http://www.securityfocus.com/bid/33772
- http://www.securitytracker.com/id?1021734
- http://securityresponse.symantec.com/avcenter/security/Content/2009.02.17.html
- http://osvdb.org/52269
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-253287-1
- http://www.vupen.com/english/advisories/2009/1097
- http://www.vupen.com/english/advisories/2009/0461
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48795
Frequently Asked Questions
What is the severity of CVE-2009-0651?
CVE-2009-0651 is considered a critical vulnerability as it allows remote attackers to execute arbitrary code.
How do I fix CVE-2009-0651?
To fix CVE-2009-0651, update the Symantec Veritas NetBackup Server to version 6.0 MP7 SP1 or later, or 6.5.3.1 or later.
What versions are affected by CVE-2009-0651?
CVE-2009-0651 affects Symantec Veritas NetBackup Server/Enterprise Server versions 5.x, 6.0 before MP7 SP1, and 6.5 before 6.5.3.1.
Can CVE-2009-0651 be exploited remotely?
Yes, CVE-2009-0651 can be exploited remotely due to insecure initial communications setup.
What are the potential consequences of CVE-2009-0651?
The potential consequences of CVE-2009-0651 include unauthorized remote code execution which can lead to data breaches.
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/description
- agent/type
- agent/event
- agent/remedy
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/symantec
- canonical/symantec veritas netbackup server
- version/symantec veritas netbackup server/5.1mp7
- version/symantec veritas netbackup server/6.0mp7
- version/symantec veritas netbackup server/6.5.2
- version/symantec veritas netbackup server/5.1
- version/symantec veritas netbackup server/6.0
- version/symantec veritas netbackup server/6.5