Threat Level: green Handler on Duty: Renato Marinho

SANS ISC: Symantec Backup Exec for Windows Server SANS ISC InfoSec Forums

Special Webcast: What you need to know about the crypt32.dll vulnerability. Register Now

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Symantec Backup Exec for Windows Server

An advisory has been issued by Symantec for their Backup Exec product.  According to the advisory a vulnerability exists that may result in an  RPC Interface Heap Overflow, Denial of Service on versions 10.x and 11.0 for Windows Servers.

The advisory indicates that hotfixes are available at:

Common Vulnerabilities and Exposures (CVE) initiative has assigned CVE Candidate CVE-2007-3509 to this issue. This issue is a candidate for inclusion in the CVE list , which standardizes names for security problems.

In order to fully execute this vulnerability the user must have administrative privileges.  Again another good reason to restrict user access whenever possible.


There is also an advisory from Secunia containing information about 2 vulnerabilities that exist in various Symantec products including  Internet Security and Brightmail.  Again to fully execute the user must have administrative privileges.





278 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!