Description
Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Veritas NetBackup 4/5 - Volume Manager Daemon Remote Buffer Overflow EDB-1421 · remote · Jan 16, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- VU#574662 third-party-advisory
- 20674 vdb-entry
- 20060115 Veritas NetBackup "Volume Manager Daemon" Module Stack Overflow - Exploit mailing-list
- 15353 vdb-entry
- 20051110 Stack Overflow in Veritas Netbackup Enterprise Server third-party-advisory
- 1015170 vdb-entry
- 17503 third-party-advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html
- 20060117 Re: Veritas NetBackup "Volume Manager Daemon" Module Stack Overflow - Exploit mailing-list
- netbackup-vmd-bo(22985) vdb-entry
- ADV-2005-2349 vdb-entry
- http://seer.support.veritas.com/docs/279553.htm