Description
Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 allows remote attackers to execute arbitrary code via a long request with a malformed length prefix.
References
- http://www.zerodayinitiative.com/advisories/ZDI-06-049.html
- VU#607312 third-party-advisory
- 23368 third-party-advisory
- netbackup-long-request-bo(30882) vdb-entry
- netbackup-connect-options-bo(30883) vdb-entry
- 1017379 vdb-entry
- http://www.symantec.com/avcenter/security/Content/2006.12.13a.html
- 20061213 ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability mailing-list
- 21565 vdb-entry
- ADV-2006-4999 vdb-entry
- 2033 third-party-advisory