PT-2008-1530 · Symantec · Symantec Backup Exec
Published
2008-02-29
·
Updated
2011-03-08
·
CVE-2007-6017
CVSS v2.0
5.1
Medium
| Vector | AV:N/AC:H/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Symantec Backup Exec for Windows Server versions 11.0.6235 through 11.0.7170
Symantec Backup Exec for Windows Server version 12.0.1364
Description
The issue allows remote attackers to cause a denial of service or create and overwrite arbitrary files via string values of certain properties, including
DOWText0, DOWText1, DOWText2, DOWText3, DOWText4, DOWText5, DOWText6, MonthText0, MonthText1, MonthText2, MonthText3, MonthText4, MonthText5, MonthText6, MonthText7, MonthText8, MonthText9, MonthText10, and MonthText11. It does not require authentication to attack a client machine that loads the vulnerable control.Recommendations
For Symantec Backup Exec for Windows Server versions 11.0.6235 through 11.0.7170, consider disabling the Save method in the PVATLCalendar.PVCalendar.1 ActiveX control until a patch is available.
For Symantec Backup Exec for Windows Server version 12.0.1364, consider disabling the Save method in the PVATLCalendar.PVCalendar.1 ActiveX control until a patch is available.
As a temporary workaround, restrict access to the properties
DOWText0 through DOWText6 and MonthText0 through MonthText11 to minimize the risk of exploitation.Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Symantec Backup Exec