← Vulnerability feed

Vulnerability record · CVE-2006-5822 · published 14 December 2006

CVE-2006-5822: Symantec veritas netbackup client vulnerability

Symantec · Veritas Netbackup Client

Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 allows remote attackers to execute arbitrary code via a long CONNECT_OPTIONS request, a different issue than CVE-2006-6222.

10.0 CVSS 2.0 High EPSS 12% · top 4.0%
10.0CVSS 2.0 base score
12%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 allows remote attackers to execute arbitrary code via a long CONNECT_OPTIONS request, a different issue than CVE-2006-6222.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/23368 PatchVendor Advisory
http://securitytracker.com/id?1017379 Patch
http://www.kb.cert.org/vuls/id/650432 PatchUS Government Resource
http://www.securityfocus.com/archive/1/454314/100/0/threaded
http://www.securityfocus.com/bid/21565 Patch
http://www.symantec.com/avcenter/security/Content/2006.12.13a.html Patch
http://www.vupen.com/english/advisories/2006/4999
http://www.zerodayinitiative.com/advisories/ZDI-06-050.html PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30883
http://secunia.com/advisories/23368 PatchVendor Advisory
http://securitytracker.com/id?1017379 Patch
http://www.kb.cert.org/vuls/id/650432 PatchUS Government Resource
http://www.securityfocus.com/archive/1/454314/100/0/threaded
http://www.securityfocus.com/bid/21565 Patch
http://www.symantec.com/avcenter/security/Content/2006.12.13a.html Patch
http://www.vupen.com/english/advisories/2006/4999
http://www.zerodayinitiative.com/advisories/ZDI-06-050.html PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30883

Track CVE-2006-5822 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-4902Symantec veritas netbackup client vulnerabilityThe NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 does not properly c…EPSS 4.3%10.0CVE-2006-6222Symantec veritas netbackup client vulnerabilityStack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 bef…EPSS 12%

Source: NIST National Vulnerability Database (record CVE-2006-5822), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.