Symantec Backup Exec Multiple Heap Overflow Vulnerabilities

Bugtraq ID:	19479
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 11 2006 12:00AM
Updated:	Aug 14 2006 10:50PM
Credit:	Discovery is credited to Nicolas Pouvesle from Tenable Network Security.
Vulnerable:	Symantec Backup Exec for Windows Server Remote Agent 9.1 Build 9.1.4691 Symantec Backup Exec for Windows Server Remote Agent 9.1 Symantec Backup Exec for Windows Server Remote Agent 10.1 Build 10.1.5629 Symantec Backup Exec for Windows Server Remote Agent 10.1 Symantec Backup Exec for Windows Server Remote Agent 10.0 Build 10.0.5520 Symantec Backup Exec for Windows Server Remote Agent 10.0 Build 10.0.5484 Symantec Backup Exec for Windows Server Remote Agent 10.0 Symantec Backup Exec for Netware Servers Remote Agent 9.2 Symantec Backup Exec for Netware Servers Remote Agent 9.1 Symantec Backup Exec Continuous Protection Server 10.1.327 .401 Symantec Backup Exec Continuous Protection Server 10.1.326 .3301 Symantec Backup Exec Continuous Protection Server 10.1.326 .2501 Symantec Backup Exec Continuous Protection Server 10.1.326 .2501 Symantec Backup Exec Continuous Protection Server 10.1.326 .1401 Symantec Backup Exec Continuous Protection Server 10.1.325 .6301
Not Vulnerable:

Symantec Backup Exec Multiple Heap Overflow Vulnerabilities

Symantec Backup Exec for Windows Servers and Remote Agents, Continuous Protection Server, and Backup Exec for Netware Servers are prone to multiple heap-overflow vulnerabilities.

A remote, authenticated attacker may exploit these vulnerabilities to execute arbitrary code and gain administrative privileges on vulnerable computers. Failed exploit attempts may result in denial-of-service conditions.

Symantec Backup Exec Multiple Heap Overflow Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Symantec Backup Exec Multiple Heap Overflow Vulnerabilities

Solution:
Symantec has released an advisory and fixes to address these issues. Please see the referenced advisory for more information.

Symantec Backup Exec Multiple Heap Overflow Vulnerabilities

References:

• SYM06-014: Symantec Backup Exec for Windows Server: RPC Interface Heap Overflow, (Symantec)
  
• Symantec Security Advisory SYM06-014 - Backup Exec for NetWare Servers Remote Ag (Symantec)