CVE-2006-0991 in the critical feed json
Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to ex…
published 2006-03-28 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-0994
- cvss
- 7.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 11.2%
- EPSS 11.2% chance of exploitation in 30 days, percentile 95%
- public exploits
- 0
- none known
Summary
Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to execute arbitrary code via crafted "Request Service" packets to the vnetd service (TCP port 13724).
Patch / fix
Exploit prediction
11.22% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.1 | AV:N/AC:H/Au:S/C:C/I:C/A:C |
References
-
securityresponse.symantec.com
/avcenter/security/Content/2006.03.27.html
patch
-
tippingpoint.com
/security/advisories/TSRT-06-01.html
vendor-advisory
-
securitytracker.com
/id?1015832
vdb-entry
-
securityfocus.com
/bid/17264
vdb-entry
- seer.support.veritas.com /docs/281521.htm
-
secunia.com
/advisories/19417
third-party-advisory
-
vupen.com
/english/advisories/2006/1124
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/25473
vdb-entry
-
securityfocus.com
/archive/1/428979/100/0/threaded
mailing-list
-
kb.cert.org
/vuls/id/377441
third-party-advisory, us-government-resource
Sources
- CVE List CVE-2006-0991
- NVD CVE-2006-0991
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.