PT-2009-3292 · Symantec · Veritas Netbackup Enterprise Server+1

Published 2009-02-20 · Updated 2017-08-17 · CVE-2009-0651

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Veritas NetBackup Server / Enterprise Server versions 5.x, 6.0 through 6.0 MP7 SP1, and 6.5 through 6.5.3.1

Description The issue concerns an unspecified vulnerability in the Veritas network daemon, allowing remote attackers to execute arbitrary code. This is related to the initial communications setup.

Recommendations For versions 5.x, update to a version outside of the 5.x range. For version 6.0, update to at least 6.0 MP7 SP1. For version 6.5, update to at least 6.5.3.1.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2009-0651

Affected Products

Symantec Veritas Netbackup Server

Veritas Netbackup Enterprise Server

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2009-0651 · Security Note
• http://seer.entsupport.symantec.com/docs/317828.htm · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-253287-1 · Vendor Advisory
• http://secunia.com/advisories/33953 · Vendor Advisory
• http://vupen.com/english/advisories/2009/0461 · Note
• http://securitytracker.com/id?1021734 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48795 · Note
• http://securityfocus.com/bid/33772 · Note
• http://vupen.com/english/advisories/2009/1097 · Note
• http://osvdb.org/52269 · Note
• http://securityresponse.symantec.com/avcenter/security/Content/2009.02.17.html · Note