CVE-2006-0990
Summary
| CVE | CVE-2006-0990 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-03-28 00:06:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | Stack-based buffer overflow in the NetBackup Catalog daemon (bpdbm) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors. |
Risk And Classification
Primary CVSS: v2.0 9 from [email protected]
AV:N/AC:L/Au:S/C:C/I:C/A:C
EPSS: 0.119460000 probability, percentile 0.937830000 (date 2026-04-19)
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
SingleConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:L/Au:S/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Veritas | Netbackup | 4.5.0 | fp | businessserver | All |
| Application | Veritas | Netbackup | 4.5.0 | fp | datacenter | All |
| Application | Veritas | Netbackup | 4.5.0 | mp | businessserver | All |
| Application | Veritas | Netbackup | 4.5.0 | mp | datacenter | All |
| Application | Veritas | Netbackup | 5.0 | All | enterprise_server | All |
| Application | Veritas | Netbackup | 5.0 | All | server | All |
| Application | Veritas | Netbackup | 5.1 | All | enterprise_server | All |
| Application | Veritas | Netbackup | 5.1 | All | server | All |
| Application | Veritas | Netbackup | 6.0 | All | enterprise_server | All |
| Application | Veritas | Netbackup | 6.0 | All | server | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| ZDI-06-006 | Zero Day Initiative | af854a3a-2127-422b-91ae-364da2661108 | www.zerodayinitiative.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| SecurityReason | af854a3a-2127-422b-91ae-364da2661108 | securityreason.com | |
| US-CERT Vulnerability Note VU#744137 | af854a3a-2127-422b-91ae-364da2661108 | www.kb.cert.org | US Government Resource |
| Veritas NetBackup Multiple Buffer Overflow Vulnerabilities - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| VERITAS NetBackup Multiple Remote Buffer Overflow Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| SecurityTracker.com Archives - Veritas NetBackup Buffer Overflows in vmd, bpdbm, and bpspsserver Daemons Let Remote Users Execute Arbitrary Code | af854a3a-2127-422b-91ae-364da2661108 | securitytracker.com | |
| Veritas NetBackup: Multiple Overflow Vulnerabilities in NetBackup Daemons | af854a3a-2127-422b-91ae-364da2661108 | securityresponse.symantec.com | Patch |
| Symantec Security Advisory SYM06-006: Multiple overflow vulnerabilities exist in Veritas NetBackup (tm) daemons that could potentially lead to execution of arbitrary code resulting in possible unauthorized, elevated privileged access to the targeted system. | af854a3a-2127-422b-91ae-364da2661108 | seer.support.veritas.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.