Symantec Backup Exec Data Management Protocol Buffer Overflow Vulnerability

Bugtraq ID:	32346
Class:	Boundary Condition Error
CVE:	CVE-2008-5408
Remote:	Yes
Local:	No
Published:	Nov 19 2008 12:00AM
Updated:	Apr 16 2015 05:51PM
Credit:	Renaud Deraison and Nicolas Pouvesle with Tenable Network Security
Vulnerable:	Symantec Backup Exec for Windows Servers 11d Symantec Backup Exec for Windows Server 12.5 Symantec Backup Exec for Windows Server 12.0
Not Vulnerable:

Symantec Backup Exec Data Management Protocol Buffer Overflow Vulnerability

Symantec Backup Exec is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts will likely result in denial-of-service conditions.

Symantec Backup Exec Data Management Protocol Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Symantec Backup Exec Data Management Protocol Buffer Overflow Vulnerability

Solution:
Symantec has released an advisory and fixes. Please see the references for details.


Symantec Backup Exec for Windows Server 12.5

• Symantec Backup Exec 12.5 for Windows Servers revision 2213 Hotfix 314380
  http://seer.entsupport.symantec.com/docs/314380.htm

Symantec Backup Exec for Windows Servers 11d

• Symantec Backup Exec 11.0 for Windows Servers revision 6235 Hotfix 39
  http://seer.entsupport.symantec.com/docs/314515.htm

Symantec Backup Exec Data Management Protocol Buffer Overflow Vulnerability

References:

• Symantec Backup Exec Homepage (Symantec )
  
• Symantec Security Advisory SYM08-021 - Backup Exec 11d, 12.0 and 12.5 for Window (Symantec)