Multiple vulnerabilities have been reported in Veritas Netbackup, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerabilities are caused due to boundary errors within the volume manager (vmd) daemon, the NetBackup Catalog (bpdbm) daemon, and the NetBackup Sharepoint Services server (bpspsserver) daemon. These can be exploited to cause buffer overflows when processing incoming, specially crafted packets.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities affect the following products:
* NetBackup Enterprise Server/NetBackup Server; Server and Clients 6.0 (all platforms)
* NetBackup Enterprise Server/NetBackup Server; Server and Clients 5.1 (all platforms)
* NetBackup Enterprise Server/NetBackup Server; Server and Clients 5.0 (all platforms)
* NetBackup DataCenter and BusinesServer; Server and Clients 4.5FP (all platforms)
* NetBackup DataCenter and BusinesServer; Server and Clients 4.5MP (all platforms)

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
3Com's Zero Day Initiative credits Sebastian Apelt for discovering two of the vulnerabilities. The third vulnerability was discovered by TippingPoint Security Research.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Symantec:
http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html
http://support.veritas.com/docs/281521

3Com Zero Day Initiative:
http://www.zerodayinitiative.com/advisories/ZDI-06-005.html
http://www.zerodayinitiative.com/advisories/ZDI-06-006.html

TippingPoint Security Research:
http://www.tippingpoint.com/security/advisories/TSRT-06-01.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers