CVE-2006-4902

The NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 does not properly check for chained commands, which allows remote attackers to execute arbitrary commands by appending malicious commands to valid commands.

• http://secunia.com/advisories/23368Patch, Vendor Advisory
• http://securitytracker.com/id?1017379Patch
• http://www.iss.net/threats/247.html
• http://www.kb.cert.org/vuls/id/252936Patch, US Government Resource
• http://www.securityfocus.com/bid/21565Patch
• http://www.symantec.com/avcenter/security/Content/2006.12.13a.htmlPatch
• http://www.vupen.com/english/advisories/2006/4999
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27638
• http://secunia.com/advisories/23368Patch, Vendor Advisory
• http://securitytracker.com/id?1017379Patch
• http://www.iss.net/threats/247.html
• http://www.kb.cert.org/vuls/id/252936Patch, US Government Resource
• http://www.securityfocus.com/bid/21565Patch
• http://www.symantec.com/avcenter/security/Content/2006.12.13a.htmlPatch
• http://www.vupen.com/english/advisories/2006/4999
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27638

Published

Dec 14, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4896Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-4897CMtextS 1.0 and earlier stores users_logins/admin.txt under …
• CVE-2006-4898PHP remote file inclusion vulnerability in include/phpxd/php…
• CVE-2006-4899The ePPIServlet script in Computer Associates (CA) eTrust Se…
• CVE-2006-4900Directory traversal vulnerability in Computer Associates (CA…
• CVE-2006-4901Computer Associates (CA) eTrust Security Command Center 1.0 …
• CVE-2006-4904Dynamic variable evaluation vulnerability in cmpi.php in Qua…
• CVE-2006-4905PHP remote file inclusion vulnerability in index.php in Artm…
• CVE-2006-4906SQL injection vulnerability in modules/calendar/week.php in …
• CVE-2006-4907OSU 3.11alpha and 3.10a allows remote attackers to obtain se…
• CVE-2006-4908OSU 3.11alpha and 3.10a allows remote attackers to obtain se…
• CVE-2006-4909Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS…