Multiple vulnerabilities in Symantec Backup Exec

Description

Multiple serious vulnerabilities have been found in Symantec Backup Exec. Malicious users can exploit these vulnerabilities to bypass auth, read / delete files, cause denial of service and possibly execute arbitrary code. Below is a complete list of vulnerabilities

1. Vectors related to the remote-agent logon can be exploited remotely;
2. A buffer overflow can be exploited locally.

Original advisories

Related products

• VERITAS-Backup-Exec

CVE list

• CVE-2008-5408
  critical
• CVE-2008-5407
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com