CVE-2006-4128 - Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message

Back Back to CVE browser

MEDIUM

Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message

Published Aug 14, 2006

6.5

MEDIUM

CVSS 2.0

EPSS 5.80%

Description

Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (10)

http://secunia.com/advisories/21472
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1380
third-party-advisoryx_refsource_SREASON
http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html
x_refsource_CONFIRM
http://securitytracker.com/id?1016683
vdb-entryx_refsource_SECTRACK
http://seer.entsupport.symantec.com/docs/284623.htm
x_refsource_CONFIRMVendor Advisory
http://www.kb.cert.org/vuls/id/647796
third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.securityfocus.com/archive/1/443037/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19479
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/3266
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/28336
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/21472		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1380		third-party-advisoryx_refsource_SREASON
http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html		x_refsource_CONFIRM
http://securitytracker.com/id?1016683		vdb-entryx_refsource_SECTRACK
http://seer.entsupport.symantec.com/docs/284623.htm		x_refsource_CONFIRMVendor Advisory
http://www.kb.cert.org/vuls/id/647796		third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.securityfocus.com/archive/1/443037/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19479		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/3266		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/28336		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 14, 2006

Updated Aug 7, 2024

Reserved Aug 14, 2006

Link CVE-2006-4128

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-4128

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-4128