CVE - CVE-2006-4128

CVE-ID
CVE-2006-4128	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:19479 URL:http://www.securityfocus.com/bid/19479 BUGTRAQ:20060811 (Security Advisory) SYM06-014 Symantec Backup Exec Internal RPC Overflow URL:http://www.securityfocus.com/archive/1/443037/100/0/threaded CERT-VN:VU#647796 URL:http://www.kb.cert.org/vuls/id/647796 CONFIRM:http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html CONFIRM:http://seer.entsupport.symantec.com/docs/284623.htm SECTRACK:1016683 URL:http://securitytracker.com/id?1016683 SECUNIA:21472 URL:http://secunia.com/advisories/21472 SREASON:1380 URL:http://securityreason.com/securityalert/1380 VUPEN:ADV-2006-3266 URL:~~http://www.vupen.com/english/advisories/2006/3266~~ (Obsolete source) XF:backupexec-rpc-interface-bo(28336) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/28336
Assigning CNA
MITRE Corporation
Date Record Created
20060814	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060814)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)