PT-2008-3969 · Symantec · Symantec Backup Exec System Recovery Manager

Published 2008-06-02 · Updated 2017-08-08 · CVE-2008-2512

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Symantec Backup Exec System Recovery Manager versions 7.x through 7.0.3 Symantec Backup Exec System Recovery Manager versions 8.x through 8.0.1

Description A directory traversal issue allows remote attackers to read arbitrary files.

Recommendations For Symantec Backup Exec System Recovery Manager versions 7.x through 7.0.3, update to version 7.0.4 or later. For Symantec Backup Exec System Recovery Manager versions 8.x through 8.0.1, update to version 8.0.2 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-2512

Affected Products

Symantec Backup Exec System Recovery Manager

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-2512 · Security Note
• http://secunia.com/advisories/30432 · Vendor Advisory
• http://securityresponse.symantec.com/avcenter/security/Content/2008.05.28c.html · Patch
• http://securityfocus.com/bid/29350 · Note
• http://securitytracker.com/id?1020128 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42714 · Note
• http://vupen.com/english/advisories/2008/1686/references · Note