CVE-2006-0991
Summary
| CVE | CVE-2006-0991 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-03-28 00:06:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to execute arbitrary code via crafted "Request Service" packets to the vnetd service (TCP port 13724). |
Risk And Classification
Primary CVSS: v2.0 7.1 from [email protected]
AV:N/AC:H/Au:S/C:C/I:C/A:C
EPSS: 0.290710000 probability, percentile 0.965910000 (date 2026-04-19)
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
HighAuthentication
SingleConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:H/Au:S/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Veritas | Netbackup | 4.5.0 | fp | businessserver | All |
| Application | Veritas | Netbackup | 4.5.0 | fp | datacenter | All |
| Application | Veritas | Netbackup | 4.5.0 | mp | businessserver | All |
| Application | Veritas | Netbackup | 4.5.0 | mp | datacenter | All |
| Application | Veritas | Netbackup | 5.0 | All | enterprise_server | All |
| Application | Veritas | Netbackup | 5.0 | All | server | All |
| Application | Veritas | Netbackup | 5.1 | All | enterprise_server | All |
| Application | Veritas | Netbackup | 5.1 | All | server | All |
| Application | Veritas | Netbackup | 6.0 | All | enterprise_server | All |
| Application | Veritas | Netbackup | 6.0 | All | server | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Veritas NetBackup Multiple Buffer Overflow Vulnerabilities - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| US-CERT Vulnerability Note VU#377441 | af854a3a-2127-422b-91ae-364da2661108 | www.kb.cert.org | US Government Resource |
| VERITAS NetBackup Multiple Remote Buffer Overflow Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| SecurityTracker.com Archives - Veritas NetBackup Buffer Overflows in vmd, bpdbm, and bpspsserver Daemons Let Remote Users Execute Arbitrary Code | af854a3a-2127-422b-91ae-364da2661108 | securitytracker.com | |
| Veritas NetBackup: Multiple Overflow Vulnerabilities in NetBackup Daemons | af854a3a-2127-422b-91ae-364da2661108 | securityresponse.symantec.com | Patch |
| Symantec Security Advisory SYM06-006: Multiple overflow vulnerabilities exist in Veritas NetBackup (tm) daemons that could potentially lead to execution of arbitrary code resulting in possible unauthorized, elevated privileged access to the targeted system. | af854a3a-2127-422b-91ae-364da2661108 | seer.support.veritas.com | |
| Intrusion Prevention IPS | TippingPoint, a division of 3Com | Published Advisories | af854a3a-2127-422b-91ae-364da2661108 | www.tippingpoint.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.