• info
• discussion
• exploit
• solution
• references

Veritas Backup Exec Web Administration Console Remote Buffer Overflow Vulnerability

Solution:
The vendor has released an advisory (VX05-005) and fixes to address this issue:


Veritas Software Backup Exec for Windows Servers 10.0 rev. 5484

• Veritas VERITAS Backup Exec 10.0 rev. 5484 for Windows Servers - upgrade to Backup Exec 10.0 rev. 5520
  http://support.veritas.com/docs/277181


• Veritas VERITAS Backup Exec 10.0 rev. 5484 for Windows Servers Hotfix 24
  http://support.veritas.com/docs/275514

Veritas Software Backup Exec for Windows Servers 8.6

• Veritas Software BENT86HF68_273422.exe
  http://seer.support.veritas.com/docs/273422.htm

Veritas Software Backup Exec for Windows Servers 9.1

• Veritas Software Be4691RHF40_273420.exe
  http://seer.support.veritas.com/docs/273420.htm

Veritas Software Backup Exec for Windows Servers 9.1 rev. 4691

• Veritas VERITAS Backup Exec 9.1 rev. 4691 for Windows Servers Hotfix 52
  http://support.veritas.com/docs/275909


• Veritas VERITAS Backup Exec 9.1 rev. 4691 for Windows Servers Installation Media
  http://support.veritas.com/docs/264658