KLA10351
Multiple vulnerabilities in Symantec Backup Exec

Multiple serious vulnerabilities have been found in Symantec Backup Exec. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, read-write backup files, inject scripts and execute arbitrary code Below is a complete list of vulnerabilities

1. Vectors related to NDMP protocol can be exploited remotely;
2. Weak file permissions can be exploited locally via file modification;
3. XSS vulnerabilities can be exploited remotely via vectors related to web interface;
4. A buffer overflow can be exploited remotely via unspecified vectors.

Symantec Backup Exec 2010 R3 service packs 2 and earlier
Symantec Backup Exec 2012 service packs 1 and earlier

Update to latest version

Symantec advisory