CVE-2006-5822: Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 befor...

Security readout for executives and security teams

This is a legacy remote code execution flaw in Symantec Veritas NetBackup. A vulnerable backup service can crash or run attacker-controlled code if it receives an overly long CONNECT_OPTIONS request. Business urgency depends on whether old NetBackup 5.x or early 6.0 systems still exist and are reachable. Exposure is most likely in legacy environments still running the named NetBackup versions, especially where bpcd is reachable over a network. The supplied affected-products field is incomplete, but the CVE description names Symantec Veritas NetBackup versions. Treat as high priority only if legacy NetBackup servers remain in production or connected networks. Backup infrastructure is operationally sensitive, and remote code execution there can affect recovery capability and data protection. If no affected versions exist, document closure with evidence. Mitigation focus: Upgrade affected NetBackup versions to at least the maintenance packs named in the CVE description.; Check Symantec or successor vendor guidance for any additional supported remediation instructions.; Restrict network access to NetBackup bpcd services to trusted backup infrastructure only..

Prepared

Jun 29, 2026, 08:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.