PT-2013-5128 · Symantec · Symantec Backup Exec

Publicado 2013-08-04 · Atualizado 2013-08-09 · CVE-2013-4678

Positive Technologies (AI Summary)

CVSS v2.0

2.7

Baixa

Vetor base

AV:A/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Symantec Backup Exec versions 2010 R3 before 2010 R3 SP3 Symantec Backup Exec versions 2012 before SP2

Description The issue affects the NDMP protocol implementation, allowing remote authenticated users to obtain sensitive host-version information.

Recommendations For Symantec Backup Exec versions 2010 R3 before 2010 R3 SP3, update to 2010 R3 SP3. For Symantec Backup Exec versions 2012 before SP2, update to SP2.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-4678

Produtos afetados

Symantec Backup Exec

Referências · 3

• http://securityfocus.com/bid/61488 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4678 · Nota de Segurança
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 · Aviso do Fabricante