Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs  Black Box Testing  Vulnerability Assessment  Vulnerability Scanner SecuriTeam™ in Your Inbox   E-mail this article to a friend New vulnerability? New tool? Tell us	VERITAS NetBackup Remote Code Execution (COMMAND_LOGON_TO_MSERVER) 17 Oct. 2005    Summary "VERITAS NetBackup Enterprise Server delivers high performance data protection that scales to protect the largest UNIX, Windows, Linux and NetWare environments." "VERITAS NetBackup Server software is a cost-effective heterogeneous backup and recovery solution designed for mid-size organizations, workgroups, and remote offices." "NetBackup Storage Migrator extends NetBackup with storage management that automatically stores data on the most appropriate media from creation to disposal; improving storage utilization, controlling data growth, and facilitating regulatory compliance." Lack of proper string filtering allow remote attackers to execute arbitrary code.   Credit: The information has been provided by zdi. The original article can be found at: http://www.zerodayinitiative.com/advisories/ZDI-05-001.html    Details Audit your web server for security holes - see what the hackers see. Sign up for a scan today - risk free! Vulnerable Systems:  * VERITAS NetBackup Data and Business Center version 4.5FP  * VERITAS NetBackup Data and Business Center version 4.5MP  * VERITAS NetBackup Enterprise version 5.0  * VERITAS NetBackup Server version 5.0  * VERITAS NetBackup Client version 5.0  * VERITAS NetBackup Enterprise version 5.1  * VERITAS NetBackup Server version 5.1  * VERITAS NetBackup Client version 5.1  * VERITAS NetBackup Enterprise version 6.0  * VERITAS NetBackup Server version 6.0  * VERITAS NetBackup Client version 6.0 This specific flaw exists within the bpjava-msvc daemon due to incorrect handling of format string data passed through the 'COMMAND_LOGON_TO_MSERVER' command. The vulnerable daemon listens on TCP port 13722 and affects both NetBackup clients and servers. This vulnerability allows remote attackers to execute arbitrary code on vulnerable NetBackup installations. Authentication is not required to exploit this vulnerability. Vendor Status: Symantec Engineers have verified this issue and made security updates available for the supported VERITAS NetBackup products. Symantec strongly recommends all customers immediately apply the latest updates for their supported product versions to protect against these types of threats. Please refer to the Symantec advisory for update information: http://www.symantec.com/avcenter/security/Content/2005.10.12.html CVE Information: CAN-2005-2715 Disclosure Timeline: 2005.09.12 Vulnerability reported to vendor 2005.09.15 Digital Vaccine released to TippingPoint customers 2005.10.11 Vulnerability information provided to ZDI security partners 2005.10.12 Coordinated public release of advisory  Comments: Subject:   Date:  From:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews  Related Articles Cisco BBSM Captive Portal Cross-site Scripting Cisco Unified Communications Manager Denial of Service Vulnerabilities Novell eDirectory Unauthenticated Access to SOAP Interface Call of Duty Denial of Service Wonderware SuiteLink Denial of Service Vulnerability WebMod Multiple Vulnerabilities IAX2 Incomplete 3-Way Handshake (Spoofing) Multiple Vendor OpenOffice Vulnerabilities Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability Cisco Network Admission Control Shared Secret Vulnerability ClamAV libclamav PeSpin Heap Overflow Vulnerability ClamAV libclamav PE WWPack Heap Overflow Vulnerability IBM Informix Pre-Authentication Stack Overflow Adobe Flash Player DeclareFunction2 Invalid Object Use Vulnerability HP OpenView NNM Buffer Overflow  Featured Articles Microsoft Windows I2O Filter Utility Driver (i2omgmt.sys) Local Privilege Escalation Vulnerability Adobe Acrobat Javascript PDF Security Feature Bypass and Memory Corruption Vulnerabilities Multiple Vendor rdesktop Vulnerabilities Wonderware SuiteLink Denial of Service Vulnerability PHP Multibyte Shell Command Escaping Bypass Vulnerability Akamai Download Manager Arbitrary Program Execution Vulnerability SugarCRM Community Edition Local File Disclosure Vulnerability
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs

Copyright © 1998-2008 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®