int(2633)

Boletines de Vulnerabilidades


Desbordamiento de búfer en zona de heap en Symantec Backup Exec for Windows Server

Clasificación de la vulnerabilidad

Propiedad Valor
Nivel de Confianza Oficial
Impacto Obtener acceso
Dificultad Experto
Requerimientos del atacante Acceso remoto sin cuenta a un servicio exotico

Información sobre el sistema

Propiedad Valor
Fabricante afectado Comercial Software
Software afectado Backup Exec for Windows Server and Remote Agent 9.1 <= 9.1.4691
Backup Exec for Windows Server and Remote Agent 10.0 <= 10.0.5484
Backup Exec for Windows Server and Remote Agent 10.0 <= 10.0.5520
Backup Exec for Windows Server and Remote Agent 10.1 <= 10.1.5629
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.325.6301
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.326.1401
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.326.2501
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.326.3301
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.327.401
Backup Exec for Netware Server Remote Agent for Windows Server = 9.1
Backup Exec for Netware Server Remote Agent for Windows Server = 9.2

Descripción

Se ha descubierto una vulnerabilidad de tipo desbordamiento de búfer en zona de heap en varias versiones de Symantec Backup Exec for Windows Server.

Un atacante remoto podría causar una denegación de servicio y ejecutar código arbitrario.

Solución



Actualización de software

Symantec
Backup Exec for Windows Server and Remote Agent 9.1 <= 9.1.4691
http://support.veritas.com/docs/284432
Backup Exec for Windows Server and Remote Agent 10.0 <= 10.0.5484
http://support.veritas.com/docs/284429
Backup Exec for Windows Server and Remote Agent 10.0 <= 10.0.5520
http://support.veritas.com/docs/284433
Backup Exec for Windows Server and Remote Agent 10.1 <= 10.1.5629
http://support.veritas.com/docs/284447
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.325.6301
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.326.1401
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.326.2501
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.326.3301
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.327.401
http://support.veritas.com/docs/284241
Backup Exec for Netware Server Remote Agent for Windows Server = 9.1
Backup Exec for Netware Server Remote Agent for Windows Server = 9.2
http://support.veritas.com/docs/284623

Identificadores estándar

Propiedad Valor
CVE
BID

Recursos adicionales

Symantec Security Advisory (SYM06-014)
http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html

Histórico de versiones

Versión Comentario Fecha
1.0 Aviso emitido 2006-08-14

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT