National Cyber-Alert System

Vulnerability Summary for CVE-2006-4128

Overview

Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#647796

Name: VU#647796

Hyperlink:http://www.kb.cert.org/vuls/id/647796

External Source: XF

Name: backupexec-rpc-interface-bo(28336)

Hyperlink:http://xforce.iss.net/xforce/xfdb/28336

External Source: BID

Name: 19479

Hyperlink:http://www.securityfocus.com/bid/19479

External Source: BUGTRAQ

Name: 20060811 (Security Advisory) SYM06-014 Symantec Backup Exec Internal RPC Overflow

Type: Advisory

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/443037/100/0/threaded

External Source: VUPEN

Name: ADV-2006-3266

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2006/3266

External Source: CONFIRM

Name: http://seer.entsupport.symantec.com/docs/284623.htm

Type: Advisory

Hyperlink:http://seer.entsupport.symantec.com/docs/284623.htm

External Source: SECTRACK

Name: 1016683

Hyperlink:http://securitytracker.com/id?1016683

External Source: CONFIRM

Name: http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html

Hyperlink:http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html

External Source: SECUNIA

Name: 21472

Type: Advisory

Hyperlink:http://secunia.com/advisories/21472

External Source: SREASON

Name: 1380

Hyperlink:http://securityreason.com/securityalert/1380