int(2633)

Vulnerability Bulletins


Desbordamiento de búfer en zona de heap en Symantec Backup Exec for Windows Server

Vulnerability classification

Property Value
Confidence level Oficial
Impact Obtener acceso
Dificulty Experto
Required attacker level Acceso remoto sin cuenta a un servicio exotico

System information

Property Value
Affected manufacturer Comercial Software
Affected software Backup Exec for Windows Server and Remote Agent 9.1 <= 9.1.4691
Backup Exec for Windows Server and Remote Agent 10.0 <= 10.0.5484
Backup Exec for Windows Server and Remote Agent 10.0 <= 10.0.5520
Backup Exec for Windows Server and Remote Agent 10.1 <= 10.1.5629
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.325.6301
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.326.1401
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.326.2501
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.326.3301
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.327.401
Backup Exec for Netware Server Remote Agent for Windows Server = 9.1
Backup Exec for Netware Server Remote Agent for Windows Server = 9.2

Description

Se ha descubierto una vulnerabilidad de tipo desbordamiento de búfer en zona de heap en varias versiones de Symantec Backup Exec for Windows Server.

Un atacante remoto podría causar una denegación de servicio y ejecutar código arbitrario.

Solution



Actualización de software

Symantec
Backup Exec for Windows Server and Remote Agent 9.1 <= 9.1.4691
http://support.veritas.com/docs/284432
Backup Exec for Windows Server and Remote Agent 10.0 <= 10.0.5484
http://support.veritas.com/docs/284429
Backup Exec for Windows Server and Remote Agent 10.0 <= 10.0.5520
http://support.veritas.com/docs/284433
Backup Exec for Windows Server and Remote Agent 10.1 <= 10.1.5629
http://support.veritas.com/docs/284447
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.325.6301
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.326.1401
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.326.2501
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.326.3301
Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 <= 10.1.327.401
http://support.veritas.com/docs/284241
Backup Exec for Netware Server Remote Agent for Windows Server = 9.1
Backup Exec for Netware Server Remote Agent for Windows Server = 9.2
http://support.veritas.com/docs/284623

Standar resources

Property Value
CVE
BID

Other resources

Symantec Security Advisory (SYM06-014)
http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html

Version history

Version Comments Date
1.0 Aviso emitido 2006-08-14
Ministerio de Defensa
CNI
CCN
CCN-CERT