PT-2008-6524 · Symantec · Symantec Backup Exec

Publicado 2008-12-09 · Atualizado 2017-08-08 · CVE-2008-5407

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions Symantec Backup Exec for Windows Servers versions 11.0 through 12.5 build 2213

Description The issue allows remote attackers to bypass authentication and read or delete files via unknown vectors in the Backup Exec remote-agent logon process.

Recommendations For Symantec Backup Exec for Windows Servers version 11.0, update to a version outside of the affected range. For Symantec Backup Exec for Windows Servers version 12.0, update to a version outside of the affected range. For Symantec Backup Exec for Windows Servers version 12.5 build 2213 and earlier, update to a version outside of the affected range.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-5407

Produtos afetados

Symantec Backup Exec

Referências · 8

• http://seer.entsupport.symantec.com/docs/314528.htm · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46730 · Nota
• http://securityresponse.symantec.com/avcenter/security/Content/2008.11.19.html · Aviso do Fabricante
• http://secunia.com/advisories/32810 · Aviso do Fabricante
• http://securityfocus.com/bid/32347 · Nota
• http://securitytracker.com/id?1021246 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5407 · Nota de Segurança
• http://vupen.com/english/advisories/2008/3209 · Nota