Vulnerabilities > CVE-2006-4902 - Unspecified vulnerability in Symantec products
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
The NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 does not properly check for chained commands, which allows remote attackers to execute arbitrary commands by appending malicious commands to valid commands.
Vulnerable Configurations
Saint
| bid | 21565 |
| description | VERITAS NetBackup bpcd daemon command chaining vulnerability |
| id | misc_netbackupbpcd |
| osvdb | 31334 |
| title | netbackup_bpcd_command_chaining |
| type | remote |
References
- http://secunia.com/advisories/23368
- http://secunia.com/advisories/23368
- http://securitytracker.com/id?1017379
- http://securitytracker.com/id?1017379
- http://www.iss.net/threats/247.html
- http://www.iss.net/threats/247.html
- http://www.kb.cert.org/vuls/id/252936
- http://www.kb.cert.org/vuls/id/252936
- http://www.securityfocus.com/bid/21565
- http://www.securityfocus.com/bid/21565
- http://www.symantec.com/avcenter/security/Content/2006.12.13a.html
- http://www.symantec.com/avcenter/security/Content/2006.12.13a.html
- http://www.vupen.com/english/advisories/2006/4999
- http://www.vupen.com/english/advisories/2006/4999
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27638
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27638