PT-2013-5082 · Symantec · Symantec Backup Exec

Published 2013-08-04 · Updated 2013-08-22 · CVE-2013-4575

Positive Technologies (AI Summary)

CVSS v2.0

7.9

High

Base vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Backup Exec versions 2010 R3 through 2010 R3 SP2, versions 2012 through 2012 SP1

Description A heap-based buffer overflow issue exists in the utility program of the Linux agent, potentially allowing remote attackers to cause a denial of service or possibly execute arbitrary code.

Recommendations For Symantec Backup Exec 2010 R3, update to at least 2010 R3 SP3. For Symantec Backup Exec 2012, update to at least 2012 SP2.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-4575

Affected Products

Symantec Backup Exec

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-4575 · Security Note
• http://securityfocus.com/bid/61485 · Note
• http://osvdb.org/95938 · Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 · Note