{"api_version":"1","generated_at":"2026-07-23T22:21:44+00:00","cve":"CVE-2006-4128","urls":{"html":"https://cve.report/CVE-2006-4128","api":"https://cve.report/api/cve/CVE-2006-4128.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-4128","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-4128"},"summary":{"title":"CVE-2006-4128","description":"Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-08-14 23:04:00","updated_at":"2018-10-17 21:33:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html","name":"http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html","refsource":"CONFIRM","tags":[],"title":"Symantec Backup Exec for Windows Server:  RPC Interface Heap Overflow, Authorized User Potential Elevation of Privilege","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/3266","name":"ADV-2006-3266","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://seer.entsupport.symantec.com/docs/284623.htm","name":"http://seer.entsupport.symantec.com/docs/284623.htm","refsource":"CONFIRM","tags":["Vendor Advisory"],"title":"Symantec Redirect","mime":"text/html","httpstatus":"400","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28336","name":"backupexec-rpc-interface-bo(28336)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/19479","name":"19479","refsource":"BID","tags":[],"title":"Symantec Backup Exec Multiple Heap Overflow Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.kb.cert.org/vuls/id/647796","name":"VU#647796","refsource":"CERT-VN","tags":["US Government Resource"],"title":"VU#647796 - Symantec Veritas Backup Exec for Windows Server vulnerable to heap-based buffer overflow","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/443037/100/0/threaded","name":"20060811 (Security Advisory) SYM06-014 Symantec Backup Exec Internal RPC Overflow","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21472","name":"21472","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Secunia - Advisories - Backup Exec Remote Agent RPC Interface Buffer Overflows","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/1380","name":"1380","refsource":"SREASON","tags":[],"title":"SecurityReason - SYM06-014 Symantec Backup Exec Internal RPC Overflow","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016683","name":"1016683","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - Symantec Backup Exec RPC Buffer Overflow Lets Remote Authenticated Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4128","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4128","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.0","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.0_build10.0.5484","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.0_build10.0.5520","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1.325.6301","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1.326.1401","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1.326.2501","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1.326.3301","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1.327.401","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1_build10.1.5629","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"9.1","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"9.1_build9.1.4691","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"9.2","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.0","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.0_build10.0.5484","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.0_build10.0.5520","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1.325.6301","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1.326.1401","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1.326.2501","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1.326.3301","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1.327.401","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"10.1_build10.1.5629","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"9.1","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"9.1_build9.1.4691","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4128","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec_veritas","cpe5":"backup_exec","cpe6":"9.2","cpe7":"*","cpe8":"windows_server_remote_agent","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-4128","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1016683","refsource":"SECTRACK","url":"http://securitytracker.com/id?1016683"},{"name":"http://seer.entsupport.symantec.com/docs/284623.htm","refsource":"CONFIRM","url":"http://seer.entsupport.symantec.com/docs/284623.htm"},{"name":"backupexec-rpc-interface-bo(28336)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28336"},{"name":"20060811 (Security Advisory) SYM06-014 Symantec Backup Exec Internal RPC Overflow","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/443037/100/0/threaded"},{"name":"VU#647796","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/647796"},{"name":"http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html","refsource":"CONFIRM","url":"http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html"},{"name":"1380","refsource":"SREASON","url":"http://securityreason.com/securityalert/1380"},{"name":"ADV-2006-3266","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/3266"},{"name":"19479","refsource":"BID","url":"http://www.securityfocus.com/bid/19479"},{"name":"21472","refsource":"SECUNIA","url":"http://secunia.com/advisories/21472"}]}},"nvd":{"publishedDate":"2006-08-14 23:04:00","lastModifiedDate":"2018-10-17 21:33:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"severity":"MEDIUM","exploitabilityScore":8,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec_veritas:backup_exec:10.1.325.6301:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec_veritas:backup_exec:10.1.326.2501:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec_veritas:backup_exec:10.1:*:windows_server_remote_agent:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec_veritas:backup_exec:9.1_build9.1.4691:*:windows_server_remote_agent:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec_veritas:backup_exec:9.2:*:windows_server_remote_agent:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec_veritas:backup_exec:10.0:*:windows_server_remote_agent:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec_veritas:backup_exec:10.1_build10.1.5629:*:windows_server_remote_agent:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec_veritas:backup_exec:10.1.326.1401:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec_veritas:backup_exec:9.1:*:windows_server_remote_agent:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec_veritas:backup_exec:10.1.326.3301:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec_veritas:backup_exec:10.0_build10.0.5520:*:windows_server_remote_agent:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec_veritas:backup_exec:10.0_build10.0.5484:*:windows_server_remote_agent:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec_veritas:backup_exec:10.1.327.401:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"4128","Ordinal":"19454","Title":"CVE-2006-4128","CVE":"CVE-2006-4128","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"4128","Ordinal":"1","NoteData":"Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"4128","Ordinal":"2","NoteData":"2006-08-14","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"4128","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}