Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netbackup | Symantec_veritas | 5.0_with_mp1 (including) | 5.0_with_mp1 (including) |
| Netbackup | Symantec_veritas | 5.0_with_mp2 (including) | 5.0_with_mp2 (including) |
| Netbackup | Symantec_veritas | 5.0_with_mp3 (including) | 5.0_with_mp3 (including) |
| Netbackup | Symantec_veritas | 5.0_with_mp4 (including) | 5.0_with_mp4 (including) |
| Netbackup | Symantec_veritas | 5.0_with_mp5 (including) | 5.0_with_mp5 (including) |
| Netbackup | Symantec_veritas | 5.1_with_mp1 (including) | 5.1_with_mp1 (including) |
| Netbackup | Symantec_veritas | 5.1_with_mp2 (including) | 5.1_with_mp2 (including) |
| Netbackup | Symantec_veritas | 5.1_with_mp3a (including) | 5.1_with_mp3a (including) |
| Netbackup | Symantec_veritas | 5.1_without_mp (including) | 5.1_without_mp (including) |
References
- http://secunia.com/advisories/17503
- http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html
- http://securitytracker.com/id?1015170
- http://seer.support.veritas.com/docs/279553.htm
- http://www.idefense.com/application/poi/display?id=336\u0026type=vulnerabilities
- http://www.kb.cert.org/vuls/id/574662
- http://www.osvdb.org/20674
- http://www.securityfocus.com/archive/1/422066/100/0/threaded
- http://www.securityfocus.com/archive/1/422157/100/0/threaded
- http://www.securityfocus.com/bid/15353
- http://www.vupen.com/english/advisories/2005/2349
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22985
- http://secunia.com/advisories/17503
- http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html
- http://securitytracker.com/id?1015170
- http://seer.support.veritas.com/docs/279553.htm
- http://www.idefense.com/application/poi/display?id=336\u0026type=vulnerabilities
- http://www.kb.cert.org/vuls/id/574662
- http://www.osvdb.org/20674
- http://www.securityfocus.com/archive/1/422066/100/0/threaded
- http://www.securityfocus.com/archive/1/422157/100/0/threaded
- http://www.securityfocus.com/bid/15353
- http://www.vupen.com/english/advisories/2005/2349
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22985