Symantec Backup Exec for Windows Servers Unauthorized Access Vulnerability

Bugtraq ID:	47824
Class:	Access Validation Error
CVE:	CVE-2011-0546
Remote:	Yes
Local:	No
Published:	May 26 2011 12:00AM
Updated:	Oct 24 2011 06:12PM
Credit:	Nibin Varghese iViZ Security
Vulnerable:	Symantec Backup Exec for Windows Servers 13 Symantec Backup Exec for Windows Servers 12.0 Symantec Backup Exec for Windows Servers 12 SP3 Symantec Backup Exec for Windows Servers 11d SP4 Symantec Backup Exec for Windows Servers 11d Symantec Backup Exec for Windows Server 12.5 Symantec Backup Exec for Windows Server 12.0 Symantec Backup Exec 2010 13.0 R2 Symantec Backup Exec 2010 13.0
Not Vulnerable:	Symantec Backup Exec for Windows Servers 2010 R3 Symantec Backup Exec 2010 R3

Symantec Backup Exec for Windows Servers Unauthorized Access Vulnerability

Symantec Backup Exec for Windows Servers is prone to an unauthorized-access vulnerability.

An attacker can exploit this issue to bypass authentication and execute arbitrary NDMP commands with elevated privileges.

Symantec Backup Exec for Windows Servers Unauthorized Access Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/47824.zip

Symantec Backup Exec for Windows Servers Unauthorized Access Vulnerability

Solution:
Updates are available; please see the references for more information.

Symantec Backup Exec for Windows Servers Unauthorized Access Vulnerability

References:

• Symantec Backup Exec Homepage (Symantec )
  
• Symantec BackupExec NDMP MiTM Attack (iViZ Security)
  
• SYM11-006 Security Advisories Relating to Symantec Products - Symantec Backup Ex (Symantec)