Unscored severity · published Aug 14, 2006
CVE-2006-4128
Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection…
–
CVSS
5.8%
EPSS
No
On KEV
Description
Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.8% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Backup Exec · Symantec Veritas
9.1; 9.1_build9.1.4691; 9.2; 10.0; 10.0_build10.0.5484; 10.0_build10.0.5520; +7 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4128
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4128
Vendor Advisory
http://secunia.com/advisories/21472
securityreason.com
http://securityreason.com/securityalert/1380
securityresponse.symantec.com
http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html
securitytracker.com
http://securitytracker.com/id?1016683
Vendor Advisory
http://seer.entsupport.symantec.com/docs/284623.htm
US Government Resource
http://www.kb.cert.org/vuls/id/647796
More from Backup Exec
–
CVE-2006-1298
Format string vulnerability in the Job Engine service (bengine.exe) in the Media Server in Veritas Backup Exec 10d (10.1) for Windows Servers rev
–
CVE-2006-1297
Unspecified vulnerability in Veritas Backup Exec for Windows Server Remote Agent 9.1 through 10.1, for Netware Servers and Remote Agent 9.1 and 9.2, and Remote Agent for Linux…
–
CVE-2005-2611
VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static…
–
CVE-2005-2079
Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers allows remote attackers to execute arbitrary code
–
CVE-2005-2080
Unknown vulnerability in Remote Agent for Windows Servers (RAWS) in VERITAS Backup Exec 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for NetWare, allows remote…