A vulnerability has been reported in Symantec Backup Exec System Recovery Manager, which can be exploited by malicious people to disclose potentially sensitive information and potentially compromise a vulnerable system.

The vulnerability is caused due to an input validation error and can be exploited to e.g. read certain system files and gain unauthorized access to the vulnerable system via directory traversal attacks.

The vulnerability is reported in versions 7.x and 8.x.

Solution
Update to version 7.0.4 or 8.0.2.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Nicolas Pouvesle, Tenable Security.

Changelog
Further details available to Secunia VIM customers

Original Advisory
SYM08-013:
http://securityresponse.symantec.com/avcenter/security/Content/2008.05.28c.html

Deep Links
Links available to Secunia VIM customers