Symantec Veritas NetBackup Communication Setup Remote Privilege Escalation Vulnerability
BID:33772
Info
Symantec Veritas NetBackup Communication Setup Remote Privilege Escalation Vulnerability
| Bugtraq ID: | 33772 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 17 2009 12:00AM |
| Updated: | Jun 04 2009 04:49PM |
| Credit: | National Australia Bank�??s Security Assurance team |
| Vulnerable: |
Symantec Veritas NetBackup Server 6.5.2 Symantec Veritas NetBackup Server 6.5 Symantec Veritas NetBackup Server 6.0 MP7 Symantec Veritas NetBackup Server 6.0 Symantec Veritas NetBackup Server 5.1 MP7 Symantec Veritas NetBackup Server 5.1 Symantec Veritas NetBackup Enterprise Server 6.5.2 Symantec Veritas NetBackup Enterprise Server 6.5 Symantec Veritas NetBackup Enterprise Server 6.0 MP7 Symantec Veritas NetBackup Enterprise Server 6.0 Symantec Veritas NetBackup Enterprise Server 5.1 MP7 Symantec Veritas NetBackup Enterprise Server 5.1 Hitachi JP1/VERITAS NetBackup 6.5 08-15 (Windows) Hitachi JP1/VERITAS NetBackup 6.5 08-14 (Windows) Hitachi JP1/VERITAS NetBackup 6.5 08-13 (Windows) Hitachi JP1/VERITAS NetBackup 6.5 08-12 (windows) Hitachi JP1/VERITAS NetBackup 6.5 08-11 (Windows) Hitachi JP1/VERITAS NetBackup 6.5 08-10 (Windows) Hitachi JP1/VERITAS NetBackup 6.0 07-67 (Windows) Hitachi JP1/VERITAS NetBackup 6.0 07-66 (Windows) Hitachi JP1/VERITAS NetBackup 6.0 07-65 (Windows) Hitachi JP1/VERITAS NetBackup 6.0 07-64 (Windows) Hitachi JP1/VERITAS NetBackup 6.0 07-63 (Windows) Hitachi JP1/VERITAS NetBackup 6.0 07-62 (Windows) Hitachi JP1/VERITAS NetBackup 6.0 07-61 (Windows) Hitachi JP1/VERITAS NetBackup 6.0 07-60 (Windows) Hitachi JP1/VERITAS NetBackup 5.1 07-15 (Windows) Hitachi JP1/VERITAS NetBackup 5.1 07-14 (Windows) Hitachi JP1/VERITAS NetBackup 5.1 07-13 (Windows) Hitachi JP1/VERITAS NetBackup 5.1 07-12 (Windows) Hitachi JP1/VERITAS NetBackup 5.1 07-11 (Windows) Hitachi JP1/VERITAS NetBackup 5.1 07-10 (Windows) Hitachi JP1/VERITAS NetBackup 5 07-02 (Windows) Hitachi JP1/VERITAS NetBackup 5 07-01 (Windows) Hitachi JP1/VERITAS NetBackup 5 07-00 (Windows) |
| Not Vulnerable: |
Symantec Veritas NetBackup Server 6.5.3 .1 Symantec Veritas NetBackup Enterprise Server 6.0 MP7 SO1 |
Discussion
Symantec Veritas NetBackup Communication Setup Remote Privilege Escalation Vulnerability
Symantec Veritas NetBackup Server and Enterprise Server are prone to a remote privilege-escalation vulnerability because they fail to adequately sanitize data during initial communication handshakes.
Remote authorized attackers who have access to the targeted host's local network can exploit this issue to execute arbitrary code with elevated privileges. Successfully exploiting this issue may compromise the affected computer. Failed attempts may result in a denial-of-service; other consequences may also be possible.
Symantec Veritas NetBackup Server and Enterprise Server are prone to a remote privilege-escalation vulnerability because they fail to adequately sanitize data during initial communication handshakes.
Remote authorized attackers who have access to the targeted host's local network can exploit this issue to execute arbitrary code with elevated privileges. Successfully exploiting this issue may compromise the affected computer. Failed attempts may result in a denial-of-service; other consequences may also be possible.
Exploit / POC
Symantec Veritas NetBackup Communication Setup Remote Privilege Escalation Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Symantec Veritas NetBackup Communication Setup Remote Privilege Escalation Vulnerability
Solution:
The vendor has released an advisory and updates to address this issue. Please see the references for more information.
Solution:
The vendor has released an advisory and updates to address this issue. Please see the references for more information.
References
Symantec Veritas NetBackup Communication Setup Remote Privilege Escalation Vulnerability
References:
References: