A vulnerability has been reported in VERITAS Backup Exec, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the Agent Browser service when processing received registration requests. This can be exploited to cause a stack-based buffer overflow by sending a malicious registration request containing an overly long hostname.

Successful exploitation allows execution of arbitrary code.

Solution
Apply hotfixes.
Further details available to Secunia VIM customers

Provided and/or discovered by
Patrik Karlsson

Changelog
Further details available to Secunia VIM customers

Original Advisory
VERITAS:
http://seer.support.veritas.com/docs/273419.htm

iDEFENSE:
http://www.idefense.com/application/poi/display?id=169&type=vulnerabilities

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers