Vulnerable Systems:
* Symantec Backup Exec for Windows Servers 13
* Symantec Backup Exec for Windows Servers 12.0
* Symantec Backup Exec for Windows Servers 12 SP3
* Symantec Backup Exec for Windows Servers 11d SP4
* Symantec Backup Exec for Windows Servers 11d
* Symantec Backup Exec for Windows Server 12.5
* Symantec Backup Exec for Windows Server 12.0
* Symantec Backup Exec 2010 13.0 R2
* Symantec Backup Exec 2010 13.0
Symantec Backup Exec for Windows Servers is prone to an unauthorized-access vulnerability. An attacker can exploit this issue to bypass authentication and execute arbitrary NDMP commands with elevated privileges.
Vendor Status:
Symantec as issued an update for this vulnerablity