CVE-2006-4128

CVE-2006-4128 describes multiple heap-based buffer overflows in various Symantec VERITAS Backup Exec products, including versions for Netware Server Remote Agent, Continuous Protection Server Remote Agent, and Windows Server and Remote Agent. A remote attacker can exploit these vulnerabilities by sending a crafted RPC message. This can lead to a denial of service (application crash) and potentially arbitrary code execution. The CVSS score of 6.5 indicates a medium severity, with a network attack vector and low attack complexity, requiring authentication to achieve partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.