Unrated severityNVD Advisory· Published Mar 19, 2006· Updated Jun 16, 2026
CVE-2006-1298
CVE-2006-1298
Description
Format string vulnerability in the Job Engine service (bengine.exe) in the Media Server in Veritas Backup Exec 10d (10.1) for Windows Servers rev. 5629, Backup Exec 10.0 for Windows Servers rev. 5520, Backup Exec 10.0 for Windows Servers rev. 5484, and Backup Exec 9.1 for Windows Servers rev. 4691, when the job log mode is Full Detailed (aka Full Details), allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted filename on a machine that is backed up by Backup Exec.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:symantec_veritas:backup_exec:10.0:*:windows_servers:*:*:*:*:*+ 2 more
- cpe:2.3:a:symantec_veritas:backup_exec:10.0:*:windows_servers:*:*:*:*:*
- cpe:2.3:a:symantec_veritas:backup_exec:9.1:*:*:*:*:*:*:*
- (no CPE)range: 9.1 rev. 4691, 10.0 rev. 5484, 10.0 rev. 5520, 10.1 rev. 5629
Patches
Vulnerability mechanics
References
8- support.veritas.com/docs/282254nvdPatchVendor Advisory
- www.securityfocus.com/bid/17096nvdPatch
- secunia.com/advisories/19242nvd
- securitytracker.com/idnvd
- www.securityfocus.com/archive/1/428223/100/0/threadednvd
- www.symantec.com/avcenter/security/Content/2006.03.17b.htmlnvd
- www.vupen.com/english/advisories/2006/0996nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/25310nvd
News mentions
0No linked articles in our index yet.