CVE-2006-6222: Symantec Veritas Netbackup Client

High severity, CVSS 10.0. EPSS: 12.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 allows remote attackers to execute arbitrary code via a long request with a malformed length prefix.

Affected products

• Symantec Veritas Netbackup Client: version 5.0 only; version 5.1 only; version 6.0 only
• Symantec Veritas Netbackup Enterprise Server: version 5.0 only; version 5.1 only; version 6.0 only
• Symantec Veritas Netbackup Server: version 5.0 only; version 5.1 only; version 6.0 only

Published 2006-12-14. Last modified 2026-06-16.