Title : Symantec Veritas NetBackup Multiple Daemons Remote Buffer Overflow Vulnerabilities VUPEN ID : VUPEN/ADV-2006-1124 CVE ID : CVE-2006-0989 - CVE-2006-0990 - CVE-2006-0991
Rated as : Critical
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2006-03-27
Technical Description
Multiple vulnerabilities have been identified in Veritas NetBackup Master, Media Servers and clients, which could be exploited by remote attackers to take complete control of an affected system.
The first issue is due to a buffer overflow error in the volume manager daemon (vmd.exe) that does not properly handle malformed data sent to port 13701/TCP, which could be exploited by remote attackers to execute arbitrary commands.
The second flaw is due to a buffer overflow error in the NetBackup Database Manager service (bpdbm.exe) that does not properly handle malformed data sent to port 13721/TCP, which could be exploited by remote attackers to compromise a vulnerable system.
The third vulnerability is due to a buffer overflow error in the VERITAS Network Daemon (vnetd) that does not properly handle specially crafted messages sent to port 13724/TCP, which could be exploited by attackers to execute arbitrary commands.
