|
Symantec Backup Exec for Windows Servers Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA32810
|
|
|
Release Date:
|
2008-11-20
|
|
Last Update:
|
2008-12-12
|
|
Popularity:
|
4,733 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Security Bypass
DoS
System access
|
|
Where:
|
From local network
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Symantec Backup Exec for Windows Servers 11.x
Symantec Backup Exec for Windows Servers 12.x
|
|
|
Binary Analysis:
|
BA614 :: Available for 1 Credit 
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Some vulnerabilities have been reported in Symantec Backup Exec for Windows Servers, which can be exploited by malicious people to bypass certain security restrictions and by malicious users to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.
1) Multiple errors in several authentication methods used by a Backup Exec Remote Agent can be exploited to gain unauthorized access to the application and e.g. read or delete arbitrary files.
2) An unspecified error in the data management protocol can be exploited to cause a buffer overflow.
Successful exploitation of this vulnerability may allow execution of arbitrary code, but requires that the attacker is authenticated as a privileged user (the required privileges can also be gained by exploiting vulnerability #1).
The vulnerabilities are reported in the following versions:
* Backup Exec for Windows Servers version 12.5 build 2213
* Backup Exec for Windows Servers version 12.0 build 1364
* Backup Exec for Windows Servers version 11d build 7170
* Backup Exec for Windows Servers version 11d build 6235
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
