CVE-2006-6222: Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 befor...

Security readout for executives and security teams

This is an old but serious NetBackup flaw. A remote attacker could send a malformed oversized request to the NetBackup bpcd service and potentially run code on the backup host. Backup servers often hold sensitive recovery data, so any remaining legacy installations deserve prompt attention. Exposure is likely limited to legacy Symantec Veritas NetBackup environments still running the named versions or unmaintained backup infrastructure. The bundle’s structured affected-product field is incomplete, so confirm against deployed NetBackup versions rather than relying on CPE data. Prioritize this if any legacy NetBackup 5.x or 6.0 systems remain in production, especially on networks reachable beyond backup administrators. If no affected versions exist, document the finding as not applicable. Mitigation focus: Upgrade NetBackup 5.0 to 5.0_MP7 or later, per the supplied CVE description.; Upgrade NetBackup 5.1 to 5.1_MP6 or later, per the supplied CVE description.; Upgrade NetBackup 6.0 to 6.0_MP4 or later, per the supplied CVE description..

Prepared

Jun 29, 2026, 08:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.