symantec backup exec 12.0 vulnerabilities and exploits

(subscribe to this query)

Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle malicious users to execute NDMP commands via unspecified vectors.

Symantec Backup Exec 11.0 Symantec Backup Exec 13.0 Symantec Backup Exec 12.0 Symantec Backup Exec 12.5

1 EDB exploit

VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager (NOM) 6.0 GA up to and including 6.5.5; Veritas Backup Reporter (VBR) 6.0 GA up to and including 6.6; Veritas Storage Foundation (SF) 3.5; V...

Symantec Veritas Cluster Server One 2.0.1 Symantec Veritas Storage Foundation For Oracle Real Application Cluster 3.5 Symantec Veritas Storage Foundation Cluster File System 4.0 Symantec Veritas Storage Foundation Manager 1.1 Symantec Veritas Cluster Server 5.0 Symantec Veritas Storage Foundation Cluster File System 5.0 Symantec Veritas Netbackup Operations Manager 6.5.5 Symantec Veritas Storage Foundation For Windows High Availability 5.0rp1a Symantec Veritas Storage Foundation Manager 1.0 Symantec Veritas Storage Foundation For Windows High Availability 4.3mp2 Symantec Veritas Storage Foundation Cluster File System 3.5 Symantec Veritas Storage Foundation For Oracle Real Application Cluster 4.0 Symantec Veritas Storage Foundation 3.5 Symantec Veritas Micromeasure 5.0 Symantec Veritas Storage Foundation For Windows High Availability 5.1 Symantec Backup Exec Continuous Protection Server 12.5 Symantec Veritas Storage Foundation For High Availability 3.5 Symantec Veritas Cluster Server One 2.0 Symantec Veritas Storage Foundation For Windows High Availability 5.1ap1 Symantec Veritas Netbackup Operations Manager 6.0 Ga Symantec Veritas Storage Foundation For Oracle Real Application Cluster 5.0 Symantec Veritas Storage Foundation For Sybase 5.0

Multiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec Backup Exec for Windows Servers 11.0 (aka 11d) builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allow remote malicious users to bypass authentication, and read or delete files...

Symantec Backup Exec For Windows Server 11d Symantec Backup Exec For Windows Server 12.5 Symantec Backup Exec For Windows Server 12.0

Buffer overflow in the data management protocol in Symantec Backup Exec for Windows Servers 11.0 (aka 11d) builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary ...

Symantec Backup Exec For Windows Server 11d Symantec Backup Exec For Windows Server 12.5 Symantec Backup Exec For Windows Server 12.0

Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote malicious users...

Symantec Backup Exec For Windows Server 11d Symantec Backup Exec For Windows Server 12.0

2 EDB exploits

The PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, exposes the unsafe Save method, which allows remote malicious users t...

Symantec Backup Exec For Windows Server 11d Symantec Backup Exec For Windows Server 12.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook