Veritas Backup Exec Admin Plus Pack Option Remote Heap Overflow Vulnerability
BID:14023
Info
Veritas Backup Exec Admin Plus Pack Option Remote Heap Overflow Vulnerability
| Bugtraq ID: | 14023 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 22 2005 12:00AM |
| Updated: | Jun 22 2005 12:00AM |
| Credit: | Discovery is credited to NGSSoftware. |
| Vulnerable: |
Veritas Software Backup Exec for Windows Servers 10.0 rev. 5484 SP1 Veritas Software Backup Exec for Windows Servers 10.0 rev. 5484 Veritas Software Backup Exec for Windows Servers 9.1 rev. 4691 SP2 Veritas Software Backup Exec for Windows Servers 9.1 rev. 4691 Veritas Software Backup Exec for Windows Servers 9.0 rev. 4454 SP1 Veritas Software Backup Exec for Windows Servers 9.0 rev. 4454 Veritas Software Backup Exec for Windows Servers 9.0 rev. 4367 SP1 Veritas Software Backup Exec for Windows Servers 9.0 rev. 4367 |
| Not Vulnerable: |
Veritas Software Backup Exec for Windows Servers 10.0 rev. 5520 |
Discussion
Veritas Backup Exec Admin Plus Pack Option Remote Heap Overflow Vulnerability
Veritas Backup Exec is affected by a remote heap overflow vulnerability.
This issue affects servers using the Admin Plus Pack Option. A remote attacker can exploit this issue by crafting and sending malicious data to the service and executing arbitrary code.
It is conjectured that successful exploitation may result in a superuser compromise.
This issue affects Backup Exec running on Microsoft Windows platforms.
Veritas Backup Exec is affected by a remote heap overflow vulnerability.
This issue affects servers using the Admin Plus Pack Option. A remote attacker can exploit this issue by crafting and sending malicious data to the service and executing arbitrary code.
It is conjectured that successful exploitation may result in a superuser compromise.
This issue affects Backup Exec running on Microsoft Windows platforms.
Exploit / POC
Veritas Backup Exec Admin Plus Pack Option Remote Heap Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Veritas Backup Exec Admin Plus Pack Option Remote Heap Overflow Vulnerability
Solution:
Veritas has released an advisory (VX05-006) including hotfixes to address this issue in affected products.
Veritas Software Backup Exec for Windows Servers 10.0 rev. 5484
Veritas Software Backup Exec for Windows Servers 10.0 rev. 5484 SP1
Veritas Software Backup Exec for Windows Servers 9.0 rev. 4454 SP1
Veritas Software Backup Exec for Windows Servers 9.0 rev. 4367 SP1
Veritas Software Backup Exec for Windows Servers 9.1 rev. 4691
Veritas Software Backup Exec for Windows Servers 9.1 rev. 4691 SP2
Solution:
Veritas has released an advisory (VX05-006) including hotfixes to address this issue in affected products.
Veritas Software Backup Exec for Windows Servers 10.0 rev. 5484
-
Veritas Software Q175168.BEWS10.0.5520.ESD_277181.zip
http://support.veritas.com/docs/277181
Veritas Software Backup Exec for Windows Servers 10.0 rev. 5484 SP1
-
Veritas Software be5484RHF24_275514.exe
http://support.veritas.com/docs/275514
Veritas Software Backup Exec for Windows Servers 9.0 rev. 4454 SP1
-
Veritas Software be4454RHF31_275911.exe
http://support.veritas.com/docs/275911
Veritas Software Backup Exec for Windows Servers 9.0 rev. 4367 SP1
-
Veritas Software be4367RHF21_276156.exe
http://support.veritas.com/docs/276156
Veritas Software Backup Exec for Windows Servers 9.1 rev. 4691
-
Veritas Software Q118478.BEWS.91.4691.1_264658.zip
http://support.veritas.com/docs/264658
Veritas Software Backup Exec for Windows Servers 9.1 rev. 4691 SP2
-
Veritas Software be4691RHF52_275909.exe
http://support.veritas.com/docs/275909
References
Veritas Backup Exec Admin Plus Pack Option Remote Heap Overflow Vulnerability
References:
References:
- Veritas Homepage (Veritas Software)
- Vulnerability Note VU#352625 (CERT)
- VX05-006 Remote Heap Overflow when using the VERITAS Backup Exec Admin Plus Pack (Veritas Software)