Secunia

A vulnerability has been reported in VERITAS NetBackup, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in a shared library used by the vmd (Volume Manager Daemon). This can be exploited to cause a DoS by disrupting the backup process and potentially to execute arbitrary code on an affected system via the vmd daemon.

The vulnerability has been reported in NetBackup Enterprise Server Server/Client version 5.0 and 5.1.

Note: The vulnerability may also affect other daemons that use the affected shared library.

Solution
Apply cumulative security packs.
Further details available in Customer Area

Provided and/or discovered by
Discovered by anonymous and reported via iDEFENSE.

Changelog
Further details available in Customer Area

Original Advisory
Symantec:
http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html

iDEFENSE:
http://www.idefense.com/application/poi/display?id=336&type=vulnerabilities

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area