PT-2013-5128 · Symantec · Symantec Backup Exec

Published 2013-08-04 · Updated 2013-08-09 · CVE-2013-4678

Positive Technologies (AI Summary)

CVSS v2.0

2.7

Low

Base vector

AV:A/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Symantec Backup Exec versions 2010 R3 before 2010 R3 SP3 Symantec Backup Exec versions 2012 before SP2

Description The issue affects the NDMP protocol implementation, allowing remote authenticated users to obtain sensitive host-version information.

Recommendations For Symantec Backup Exec versions 2010 R3 before 2010 R3 SP3, update to 2010 R3 SP3. For Symantec Backup Exec versions 2012 before SP2, update to SP2.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-4678

Affected Products

Symantec Backup Exec

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-4678 · Security Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 · Vendor Advisory
• http://securityfocus.com/bid/61488 · Note