Symantec Veritas Backup Exec Memory Errors Let Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1015784 |
|
SecurityTracker URL: http://securitytracker.com/id/1015784
|
|
CVE Reference:
GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Mar 17 2006
|
Impact:
Denial of service via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 9.1, 9.2, 10.0, 10.1
|
Description:
A vulnerability was reported in Symantec Veritas Backup Exec. A remote user can cause denial of service conditions.
A remote user can send specially crafted data to the target system to trigger memory errors and cause the Backup Exec process to crash or hang. This will prevent backup capabilities until Backup services are restarted.
The vendor discovered this vulnerability.
|
Impact:
A remote user can cause the backup services to hang or crash, preventing ongoing backups until the service is restarted.
|
Solution:
The vendor has issued hot fixes for Backup Exec for Windows Server Remote Agent 9.1, 10.0, and 10.1, Backup Exec for Netware Servers 9.1 and 9.2, Backup Exec for Netware Servers 9.2, Backup Exec for Netware Servers Remote Agent 9.1 and 9.2, and Remote Agent for Linux Servers 10.0 and 10.1, available at:
http://support.veritas.com/docs/282255
The vendor's advisory is available at:
http://www.symantec.com/avcenter/security/Content/2006.03.17a.html
|
Vendor URL: www.symantec.com/avcenter/security/Content/2006.03.17a.html (Links to External Site)
|
Cause:
Access control error, Boundary error
|
Underlying OS:
Linux (Any), Windows (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: 17 Mar 2006 21:47:33 -0000
Subject: Symantec Security Advisory SYM06-004
|
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Symantec Security Advisory
SYM06-004
17 March 2006
Veritas Backup Exec: Application Memory Denial of Service
Revision History
None
Severity
Medium
Remote Access - Yes
Local Access - No
Authentication Required -No
Exploit publicly available - No
Overview
During internal reviews of supported Backup Exec products and versions,
Symantec identified and fixed memory errors that could result in a process
crash or a denial of service (DoS) preventing ongoing backup capability
until Backup services are restarted.
Supported Product(s) and Agent Affected
Backup Exec for Windows Server Remote Agent9.1
Backup Exec for Windows Server Remote Agent 10.0
Backup Exec for Windows Server Remote Agent 10.1
Backup Exec for Netware Servers 9.1
Backup Exec for Netware Servers 9.2
Backup Exec for Netware Servers Remote Agent 9.1
Backup Exec for Netware Servers Remote Agent 9.2
Remote Agent for Linux Servers 10.0
Remote Agent for Linux Servers 10.1
Full Advisory available at
http://www.symantec.com/avcenter/security/Content/2006.03.17a.html
-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.5 (Build 5050)
iQA/AwUBRBsfOpIF/uvuJQrOEQK8KwCeL0VQ0EVHZ/bmC7YaKBvWPZkqNI0AoK4/
oAakTkgv/XIhQnubLh+CPEXK
=Chj1
-----END PGP SIGNATURE-----
|
|
