Description
Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 allows remote attackers to execute arbitrary code via a long CONNECT_OPTIONS request, a different issue than CVE-2006-6222.
References
- http://www.zerodayinitiative.com/advisories/ZDI-06-050.html
- 20061213 ZDI-06-050: Symantec Veritas NetBackup CONNECT_OPTIONS Buffer Overflow Vulnerability mailing-list
- 23368 third-party-advisory
- netbackup-connect-options-bo(30883) vdb-entry
- 1017379 vdb-entry
- http://www.symantec.com/avcenter/security/Content/2006.12.13a.html
- 21565 vdb-entry
- VU#650432 third-party-advisory
- ADV-2006-4999 vdb-entry