Symantec NetBackup PureDisk Authentication Bypass Vulnerability

Bugtraq ID:	19524
Class:	Access Validation Error
CVE:	CVE-2006-4228
Remote:	Yes
Local:	No
Published:	Aug 15 2006 12:00AM
Updated:	Jun 27 2007 06:28PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0
Not Vulnerable:

Symantec NetBackup PureDisk Authentication Bypass Vulnerability

Symantec NetBackup PureDisk is prone to an authentication-bypass vulnerability.

An attacker may exploit this issue to gain administrative access to the vulnerable application and to the underlying operating system.

To exploit this issue, the atttacker must have valid authentication credentials to access the network.

Symantec NetBackup PureDisk Authentication Bypass Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Symantec NetBackup PureDisk Authentication Bypass Vulnerability

Solution:
Symantec has released an update to address this issue. Please see the references for more information.


Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0

• Symantec NB_PDE_60_MP1_P01_284636.tar
  http://seer.support.veritas.com/downloads/export.asp?ddProduct=NBUPDRO E&file=NB_PDE_60_MP1_P01_284636.tar&source=1&url=/pub/support/products /NetBackup_PureDisk_Remote_Office_Edition/&id=284636

Symantec NetBackup PureDisk Authentication Bypass Vulnerability

References:

• Symantec Security Advisory SYM6-015 (Symantec)
  
• Symantec Veritas NetBackup PureDisk Remote Office Edition Home Page (Symantec)