{"api_version":"1","generated_at":"2026-07-23T09:01:37+00:00","cve":"CVE-2006-0989","urls":{"html":"https://cve.report/CVE-2006-0989","api":"https://cve.report/api/cve/CVE-2006-0989.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-0989","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-0989"},"summary":{"title":"CVE-2006-0989","description":"Stack-based buffer overflow in the volume manager daemon (vmd) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-03-28 00:06:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9","severity":"","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.kb.cert.org/vuls/id/880801","name":"http://www.kb.cert.org/vuls/id/880801","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Vulnerability Note VU#880801","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25471","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25471","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/1124","name":"http://www.vupen.com/english/advisories/2006/1124","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-06-005.html","name":"http://www.zerodayinitiative.com/advisories/ZDI-06-005.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ZDI-06-005 | Zero Day Initiative","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/17264","name":"http://www.securityfocus.com/bid/17264","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"VERITAS NetBackup Multiple Remote Buffer Overflow Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1015832","name":"http://securitytracker.com/id?1015832","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - Veritas NetBackup Buffer Overflows in vmd, bpdbm, and bpspsserver Daemons Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html","name":"http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Veritas NetBackup:  Multiple Overflow Vulnerabilities in NetBackup Daemons","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://seer.support.veritas.com/docs/281521.htm","name":"http://seer.support.veritas.com/docs/281521.htm","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Symantec Security Advisory SYM06-006:  Multiple overflow vulnerabilities exist in Veritas NetBackup (tm) daemons that could potentially lead to execution of arbitrary code resulting in possible unauthorized, elevated privileged access to the targeted system.","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/24172","name":"http://www.osvdb.org/24172","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/639","name":"http://securityreason.com/securityalert/639","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/428944/100/0/threaded","name":"http://www.securityfocus.com/archive/1/428944/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-0989","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0989","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"veritas","cpe5":"netbackup","cpe6":"4.5.0","cpe7":"fp","cpe8":"businessserver","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"veritas","cpe5":"netbackup","cpe6":"4.5.0","cpe7":"fp","cpe8":"datacenter","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"veritas","cpe5":"netbackup","cpe6":"4.5.0","cpe7":"mp","cpe8":"businessserver","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"veritas","cpe5":"netbackup","cpe6":"4.5.0","cpe7":"mp","cpe8":"datacenter","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"veritas","cpe5":"netbackup","cpe6":"5.0","cpe7":"*","cpe8":"enterprise_server","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"veritas","cpe5":"netbackup","cpe6":"5.0","cpe7":"*","cpe8":"server","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"veritas","cpe5":"netbackup","cpe6":"5.1","cpe7":"*","cpe8":"enterprise_server","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"veritas","cpe5":"netbackup","cpe6":"5.1","cpe7":"*","cpe8":"server","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"veritas","cpe5":"netbackup","cpe6":"6.0","cpe7":"*","cpe8":"enterprise_server","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"989","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"veritas","cpe5":"netbackup","cpe6":"6.0","cpe7":"*","cpe8":"server","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2006","cve_id":"989","cve":"CVE-2006-0989","epss":"0.119460000","percentile":"0.937830000","score_date":"2026-04-19","updated_at":"2026-04-20 00:11:20"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T16:56:15.519Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1015832","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1015832"},{"name":"17264","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/17264"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://seer.support.veritas.com/docs/281521.htm"},{"name":"ADV-2006-1124","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/1124"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html"},{"name":"VU#880801","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/880801"},{"name":"24172","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/24172"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-06-005.html"},{"name":"20060327 ZDI-06-005: Symantec VERITAS NetBackup Volume Manager Buffer Overflow","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/428944/100/0/threaded"},{"name":"639","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/639"},{"name":"netbackup-vmd-sscanf-bo(25471)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25471"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-03-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the volume manager daemon (vmd) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-18T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"1015832","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1015832"},{"name":"17264","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/17264"},{"tags":["x_refsource_CONFIRM"],"url":"http://seer.support.veritas.com/docs/281521.htm"},{"name":"ADV-2006-1124","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/1124"},{"tags":["x_refsource_CONFIRM"],"url":"http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html"},{"name":"VU#880801","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/880801"},{"name":"24172","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/24172"},{"tags":["x_refsource_MISC"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-06-005.html"},{"name":"20060327 ZDI-06-005: Symantec VERITAS NetBackup Volume Manager Buffer Overflow","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/428944/100/0/threaded"},{"name":"639","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/639"},{"name":"netbackup-vmd-sscanf-bo(25471)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25471"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-0989","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Stack-based buffer overflow in the volume manager daemon (vmd) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1015832","refsource":"SECTRACK","url":"http://securitytracker.com/id?1015832"},{"name":"17264","refsource":"BID","url":"http://www.securityfocus.com/bid/17264"},{"name":"http://seer.support.veritas.com/docs/281521.htm","refsource":"CONFIRM","url":"http://seer.support.veritas.com/docs/281521.htm"},{"name":"ADV-2006-1124","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/1124"},{"name":"http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html","refsource":"CONFIRM","url":"http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html"},{"name":"VU#880801","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/880801"},{"name":"24172","refsource":"OSVDB","url":"http://www.osvdb.org/24172"},{"name":"http://www.zerodayinitiative.com/advisories/ZDI-06-005.html","refsource":"MISC","url":"http://www.zerodayinitiative.com/advisories/ZDI-06-005.html"},{"name":"20060327 ZDI-06-005: Symantec VERITAS NetBackup Volume Manager Buffer Overflow","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/428944/100/0/threaded"},{"name":"639","refsource":"SREASON","url":"http://securityreason.com/securityalert/639"},{"name":"netbackup-vmd-sscanf-bo(25471)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25471"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-0989","datePublished":"2006-03-28T00:00:00.000Z","dateReserved":"2006-03-03T00:00:00.000Z","dateUpdated":"2024-08-07T16:56:15.519Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-03-28 00:06:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:4.5.0:fp:businessserver:*:*:*:*:*","matchCriteriaId":"74DFFDE3-533A-4F35-949A-C85CBFCD7C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:4.5.0:fp:datacenter:*:*:*:*:*","matchCriteriaId":"F7B2572C-C560-4D7F-8824-A04DA07583FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:4.5.0:mp:businessserver:*:*:*:*:*","matchCriteriaId":"BCA898F1-6E9A-41DE-ABB3-4006D16CF315"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:4.5.0:mp:datacenter:*:*:*:*:*","matchCriteriaId":"6F18487E-ADA8-4362-9F50-73568716825A"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:5.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E3592CA8-4F02-421D-B373-A859231A447E"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:5.0:*:server:*:*:*:*:*","matchCriteriaId":"790282C3-9148-4D78-95ED-058D2166EB92"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:5.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D6AD552C-8462-4B56-865C-7858A1892E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:5.1:*:server:*:*:*:*:*","matchCriteriaId":"F570650A-8E21-4F66-B4D2-447FBB8EA9D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:6.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"BE706E94-7808-4C59-A17D-0E300D5E939D"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:6.0:*:server:*:*:*:*:*","matchCriteriaId":"2B52E958-2728-48C8-ACBC-CED68045A9FC"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"989","Ordinal":"1","Title":"CVE-2006-0989","CVE":"CVE-2006-0989","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"989","Ordinal":"1","NoteData":"Stack-based buffer overflow in the volume manager daemon (vmd) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors.","Type":"Description","Title":"CVE-2006-0989"},{"CveYear":"2006","CveId":"989","Ordinal":"2","NoteData":"2006-03-27","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"989","Ordinal":"3","NoteData":"2018-10-18","Type":"Other","Title":"Modified"}]}}}