Veritas NetBackup Access Violation Vulnerability

Bugtraq ID:	14355
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 22 2005 12:00AM
Updated:	Jul 22 2005 12:00AM
Credit:	Discovery is credited to <[email protected]>.
Vulnerable:	Veritas Software NetBackup Server 5.1 Veritas Software NetBackup for NetWare Media Servers 5.1 MP3 Veritas Software NetBackup for NetWare Media Servers 5.1 MP2 Veritas Software NetBackup for NetWare Media Servers 5.1 MP1 Veritas Software NetBackup for NetWare Media Servers 5.1 Veritas Software NetBackup Enterprise Server 5.1
Not Vulnerable:

Veritas NetBackup Access Violation Vulnerability

Veritas NetBackup may be prone to an access violation error.

It is conjectured that this issue may arise due to NULL pointer dereference, although this is not confirmed. An attacker may crash the current listening process (the child process spawned by the agent for connections attempts) by exploiting this vulnerability.

Veritas NetBackup 5.1 running on Microsoft Windows platform is reported to be vulnerable to this issue.

Veritas NetBackup Access Violation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Veritas NetBackup Access Violation Vulnerability

Solution:
Symantec has acknowledged this issue and a fix will be released in the near future. Please see the attached message reference for more information.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Veritas NetBackup Access Violation Vulnerability

References:

• Veritas Homepage (Veritas Software)
  
• VERITAS NETBACKUP 5.1 'TIME_STAMP' VULNERABILITY (arnold)
  
• BID 14355, VERITAS NetBackup 5.1 Time Stamp Vulnerability ([email protected])