Vulnerabilities > CVE-2006-4902 - Remote vulnerability in Symantec products
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
The NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 does not properly check for chained commands, which allows remote attackers to execute arbitrary commands by appending malicious commands to valid commands.
Vulnerable Configurations
Saint
| bid | 21565 |
| description | VERITAS NetBackup bpcd daemon command chaining vulnerability |
| id | misc_netbackupbpcd |
| osvdb | 31334 |
| title | netbackup_bpcd_command_chaining |
| type | remote |
References
- http://secunia.com/advisories/23368
- http://securitytracker.com/id?1017379
- http://www.iss.net/threats/247.html
- http://www.kb.cert.org/vuls/id/252936
- http://www.securityfocus.com/bid/21565
- http://www.symantec.com/avcenter/security/Content/2006.12.13a.html
- http://www.vupen.com/english/advisories/2006/4999
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27638