PT-2013-5082 · Symantec · Symantec Backup Exec

Publicado 2013-08-04 · Atualizado 2013-08-22 · CVE-2013-4575

Positive Technologies (AI Summary)

CVSS v2.0

7.9

Alta

Vetor base

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Backup Exec versions 2010 R3 through 2010 R3 SP2, versions 2012 through 2012 SP1

Description A heap-based buffer overflow issue exists in the utility program of the Linux agent, potentially allowing remote attackers to cause a denial of service or possibly execute arbitrary code.

Recommendations For Symantec Backup Exec 2010 R3, update to at least 2010 R3 SP3. For Symantec Backup Exec 2012, update to at least 2012 SP2.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-4575

Produtos afetados

Symantec Backup Exec

Referências · 4

• http://securityfocus.com/bid/61485 · Nota
• http://osvdb.org/95938 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4575 · Nota de Segurança
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 · Nota