Veritas Backup Exec Remote Agent Null Pointer Dereference Denial Of Service Vulnerability

Bugtraq ID:	14021
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-0772
Remote:	Yes
Local:	No
Published:	Jun 22 2005 12:00AM
Updated:	Jul 12 2009 04:06PM
Credit:	Discovery is credited to Sebastian Apelt.
Vulnerable:	Veritas Software Backup Exec for Windows Servers 10.0 rev. 5520 Veritas Software Backup Exec for Windows Servers 10.0 rev. 5484 SP1 Veritas Software Backup Exec for Windows Servers 10.0 rev. 5484 Veritas Software Backup Exec for Windows Servers 9.1 rev. 4691 SP2 Veritas Software Backup Exec for Windows Servers 9.1 rev. 4691 Veritas Software Backup Exec for Windows Servers 9.0 rev. 4454 SP1 Veritas Software Backup Exec for Windows Servers 9.0 rev. 4454 Veritas Software Backup Exec for Windows Servers 9.0 rev. 4367 SP1 Veritas Software Backup Exec for Windows Servers 9.0 rev. 4367 Veritas Software Backup Exec for NetWare Servers 9.1.1154 Veritas Software Backup Exec for NetWare Servers 9.1.1152 .4 Veritas Software Backup Exec for NetWare Servers 9.1.1152 Veritas Software Backup Exec for NetWare Servers 9.1.1151 .1 Veritas Software Backup Exec for NetWare Servers 9.1.1127 .1 Veritas Software Backup Exec for NetWare Servers 9.1.1067 .3 Veritas Software Backup Exec for NetWare Servers 9.1.1067 .2 Veritas Software Backup Exec for NetWare Servers 9.1.307 Veritas Software Backup Exec for NetWare Servers 9.1.306 Veritas Software Backup Exec for NetWare Servers 9.0.4202 Veritas Software Backup Exec for NetWare Servers 9.0.4174 Veritas Software Backup Exec for NetWare Servers 9.0.4172 Veritas Software Backup Exec for NetWare Servers 9.0.4170 Veritas Software Backup Exec for NetWare Servers 9.0.4019
Not Vulnerable:	Veritas Software Backup Exec for Windows Servers 10.0 rev. 5520 Veritas Software Backup Exec for NetWare Servers 9.1.1156

Veritas Backup Exec Remote Agent Null Pointer Dereference Denial Of Service Vulnerability

VERITAS Backup Exec Remote Agent is prone to a remotely exploitable denial of service vulnerability. This could cause a denial of service on the computer hosting the application.

This issue only affects the application on Microsoft Windows platforms.

Veritas Backup Exec Remote Agent Null Pointer Dereference Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Veritas Backup Exec Remote Agent Null Pointer Dereference Denial Of Service Vulnerability

Solution:
Fixes are available:


Veritas Software Backup Exec for Windows Servers 10.0 rev. 5484

• Veritas Software Q175168.BEWS10.0.5520.ESD_277181.zip
  http://support.veritas.com/docs/277181

Veritas Software Backup Exec for Windows Servers 10.0 rev. 5484 SP1

• Veritas Software be5484RHF24_275514.exe
  http://support.veritas.com/docs/275514

Veritas Software Backup Exec for Windows Servers 9.0 rev. 4367 SP1

• Veritas Software be4367RHF21_276156.exe
  http://support.veritas.com/docs/276156

Veritas Software Backup Exec for Windows Servers 9.0 rev. 4454 SP1

• Veritas Software be4454RHF31_275911.exe
  http://support.veritas.com/docs/275911

Veritas Software Backup Exec for Windows Servers 9.1 rev. 4691 SP2

• Veritas Software be4691RHF52_275909.exe
  http://support.veritas.com/docs/275909

Veritas Backup Exec Remote Agent Null Pointer Dereference Denial Of Service Vulnerability

References:

• Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability (iDEFENSE)
  
• VX05-001 Multiple Denial of Service (DoS) in VERITAS Software Backup Exec Remote (Veritas Software)