Signature Detail
Short Name |
APP:VERITAS:NB-VMD-OF2 |
|---|---|
Severity |
Critical |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Veritas NetBackup Volume Manager Daemon Buffer Overflow (2) |
Release Date |
2006/10/17 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Veritas NetBackup Volume Manager Daemon Buffer Overflow (2)
This signature detects attempts to exploit a known vulnerability in the Veritas NetBackup Volume Manager. A successful attack can allow remote code execution with system privileges.
Extended Description
Various daemons running in VERITAS NetBackup are prone to buffer-overflow vulnerabilities. Specifically, the vulnerabilities affect the volume manager daemon ('vmd'), the NetBackup Catalog daemon ('bpdbm'), and the NetBackup Sharepoint Services server daemon ('bpspsserver'). A successful attack may allow remote attackers to execute arbitrary code on a vulnerable computer to gain unauthorized access in the context of the application. These issues affect various versions of NetBackup servers and clients.
Affected Products
- Veritas Software NetBackup BusinesServer 4.5.0 FP
- Veritas Software NetBackup BusinesServer 4.5.0 MP
- Veritas Software NetBackup DataCenter 4.5.0 FP
- Veritas Software NetBackup DataCenter 4.5.0 MP
- Veritas Software NetBackup Enterprise Server 5.0.0
- Veritas Software NetBackup Enterprise Server 5.1.0
- Veritas Software NetBackup Enterprise Server 6.0.0
References