![bugtraq logo](/images/bugtraq-logo.png)
Bugtraq mailing list archives
Secunia Research: Symantec Backup Exec Job Engine Denial of Service
From: Secunia Research <remove-vuln () secunia com>
Date: Wed, 28 Nov 2007 10:43:32 +0100
====================================================================== Secunia Research 28/11/2007 - Symantec Backup Exec Job Engine Denial of Service - ====================================================================== Table of Contents Affected Software....................................................1 Severity.............................................................2 Vendor's Description of Software.....................................3 Description of Vulnerability.........................................4 Solution.............................................................5 Time Table...........................................................6 Credits..............................................................7 References...........................................................8 About Secunia........................................................9 Verification........................................................10 ====================================================================== 1) Affected Software * Symantec Backup Exec for Windows Servers version 11d (11.0 rev 7170) NOTE: Other versions may also be affected. ====================================================================== 2) Severity Rating: Less Critical Impact: Denial of Service Where: Local network ====================================================================== 3) Vendor's Description of Software Symantec Backup Exec 11d for Windows Servers is the gold standard in Windows data recovery, providing cost-effective, high-performance, and certified disk-to-disk-to-tape backup and recovery?with available continuous data protection for Microsoft Exchange, SQL, file servers, and workstations. High-performance agents and options provide fast, flexible, granular protection and recovery, and scalable management of local and remote server backups." Product Link: http://www.symantec.com/business/products/overview.jsp?pcid=2244&pvid=57_1 ====================================================================== 4) Description of Vulnerability Secunia Research has discovered some vulnerabilities in Symantec Backup Exec for Windows Servers, which can be exploited by malicious people to cause a DoS (Denial of Service). 1) A NULL-pointer dereference error in the Backup Exec Job Engine service (bengine.exe) when handling exceptions can be exploited to crash the service by sending a specially crafted packet to default port 5633/TCP. 2) Two integer overflow errors within the Backup Exec Job Engine service can be exploited to e.g. cause the service to enter an infinite loop and exhaust all available memory or consume large amounts of CPU resource by sending a specially crafted packet to default port 5633/TCP. ====================================================================== 5) Solution Apply hotfixes. Build 11.0.6235: http://support.veritas.com/docs/294241 Build 11.0.7170: http://support.veritas.com/docs/294237 ====================================================================== 6) Time Table 02/10/2007 - Vendor notified. 02/10/2007 - Vendor replied. 28/11/2007 - Public disclosure. ====================================================================== 7) Credits Discovered by JJ Reyes, Secunia Research. ====================================================================== 8) References SYM07-029: http://securityresponse.symantec.com/avcenter/security/Content/2007.11.27.html The Common Vulnerabilities and Exposures (CVE) project has assigned CVE-2007-4346 (NULL pointer dereference error) and CVE-2007-4347 (integer overflows) for the vulnerabilities. ====================================================================== 9) About Secunia Secunia offers vulnerability management solutions to corporate customers with verified and reliable vulnerability intelligence relevant to their specific system configuration: http://corporate.secunia.com/ Secunia also provides a publicly accessible and comprehensive advisory database as a service to the security community and private individuals, who are interested in or concerned about IT-security. http://secunia.com/ Secunia believes that it is important to support the community and to do active vulnerability research in order to aid improving the security and reliability of software in general: http://corporate.secunia.com/secunia_research/33/ Secunia regularly hires new skilled team members. Check the URL below to see currently vacant positions: http://secunia.com/secunia_vacancies/ Secunia offers a FREE mailing list called Secunia Security Advisories: http://secunia.com/secunia_security_advisories/ ====================================================================== 10) Verification Please verify this advisory by visiting the Secunia website: http://secunia.com/secunia_research/2007-74/ Complete list of vulnerability reports published by Secunia Research: http://secunia.com/secunia_research/ ======================================================================
Current thread:
- Secunia Research: Symantec Backup Exec Job Engine Denial of Service Secunia Research (Nov 28)