Read the docs
TI-2006-04000 Aliases CVE-2006-4128GHSA-cm8p-r3h5-8h2x

Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server…

Priority LOW 38Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message.

Why it matters now

EPSS 0.05797 93rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:a:symantec_veritas:backup_exec:9.1:*:windows_server_remote_agent:*:*:*:*:*9.1VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.1_build9.1.4691:*:windows_server_remote_agent:*:*:*:*:*9.1_build9.1.4691VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.2:*:windows_server_remote_agent:*:*:*:*:*9.2VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:10.0:*:windows_server_remote_agent:*:*:*:*:*10.0VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:10.0_build10.0.5484:*:windows_server_remote_agent:*:*:*:*:*10.0_build10.0.5484VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:10.0_build10.0.5520:*:windows_server_remote_agent:*:*:*:*:*10.0_build10.0.5520VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:10.1:*:windows_server_remote_agent:*:*:*:*:*10.1VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:10.1.325.6301:*:*:*:*:*:*:*10.1.325.6301VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:10.1.326.1401:*:*:*:*:*:*:*10.1.326.1401VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:10.1.326.2501:*:*:*:*:*:*:*10.1.326.2501VulnerableSymantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.1:*:windows_server_remote_agent:*:*:*:*:* Versions 9.1 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.1_build9.1.4691:*:windows_server_remote_agent:*:*:*:*:* Versions 9.1_build9.1.4691 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.2:*:windows_server_remote_agent:*:*:*:*:* Versions 9.2 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:10.0:*:windows_server_remote_agent:*:*:*:*:* Versions 10.0 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:10.0_build10.0.5484:*:windows_server_remote_agent:*:*:*:*:* Versions 10.0_build10.0.5484 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:10.0_build10.0.5520:*:windows_server_remote_agent:*:*:*:*:* Versions 10.0_build10.0.5520 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:10.1:*:windows_server_remote_agent:*:*:*:*:* Versions 10.1 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:10.1.325.6301:*:*:*:*:*:*:* Versions 10.1.325.6301 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:10.1.326.1401:*:*:*:*:*:*:* Versions 10.1.326.1401 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:10.1.326.2501:*:*:*:*:*:*:* Versions 10.1.326.2501 Vulnerable ·Symantec Veritas
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:symantec_veritas:backup_exec:10.1.326.3301:*:*:*:*:*:*:*10.1.326.3301VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:10.1.327.401:*:*:*:*:*:*:*10.1.327.401VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:10.1_build10.1.5629:*:windows_server_remote_agent:*:*:*:*:*10.1_build10.1.5629VulnerableSymantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:10.1.326.3301:*:*:*:*:*:*:* Versions 10.1.326.3301 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:10.1.327.401:*:*:*:*:*:*:* Versions 10.1.327.401 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:10.1_build10.1.5629:*:windows_server_remote_agent:*:*:*:*:* Versions 10.1_build10.1.5629 Vulnerable ·Symantec Veritas

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-4128
  2. 2026-10-03 Alias added: GHSA-cm8p-r3h5-8h2x

References

Advisory 3

Other 2

  • TI-2005-02475 VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers… CVSS 2.0HIGH 10.0
  • TI-2004-01066 Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before… CVSS 2.0HIGH 10.0
  • TI-2005-00717 Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for… CVSS 2.0HIGH 7.5
  • TI-2005-00715 VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote… CVSS 2.0HIGH 10.0
  • TI-2005-01967 Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0… CVSS 2.0HIGH 7.5
  • TI-2005-01939 Buffer overflow in the VERITAS Backup Exec Web Administration Console (BEWAC) 9.0 4367… CVSS 2.0HIGH 7.5
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences