VulnerabilityModified

CVE-2006-5822

Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 allows remote attackers to execute arbitrary code via a long CONNECT_OPTIONS request, a…

HIGH 10.0EPSS 11.8%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 11.8%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 11.84% probability · 96th percentile
CISA KEV: Not listed
Affected: symantec/veritas netbackup client · symantec/veritas netbackup enterprise server · symantec/veritas netbackup server
Source: cve@mitre.org

References

http://secunia.com/advisories/23368Patch, Vendor Advisory
http://securitytracker.com/id?1017379Patch
http://www.kb.cert.org/vuls/id/650432Patch, US Government Resource
http://www.securityfocus.com/archive/1/454314/100/0/threaded
http://www.securityfocus.com/bid/21565Patch
http://www.symantec.com/avcenter/security/Content/2006.12.13a.htmlPatch
http://www.vupen.com/english/advisories/2006/4999
http://www.zerodayinitiative.com/advisories/ZDI-06-050.htmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30883
http://secunia.com/advisories/23368Patch, Vendor Advisory
http://securitytracker.com/id?1017379Patch
http://www.kb.cert.org/vuls/id/650432Patch, US Government Resource
http://www.securityfocus.com/archive/1/454314/100/0/threaded
http://www.securityfocus.com/bid/21565Patch
http://www.symantec.com/avcenter/security/Content/2006.12.13a.htmlPatch
http://www.vupen.com/english/advisories/2006/4999
http://www.zerodayinitiative.com/advisories/ZDI-06-050.htmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30883

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.