Title: Symantec Backup Exec Data Management Protocol Buffer Overflow Vulnerability
Severity: HIGH
Description:
Symantec Backup Exec is a network-enabled backup solution for Novell NetWare and Microsoft Windows platforms.
The application is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. This issue is present in the data management protocol. To exploit this issue, attackers must first be authenticated to the application.
Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts will likely result in denial-of-service conditions.
Affected Products:
- Symantec Backup Exec for Windows Server 12.0
- Symantec Backup Exec for Windows Server 12.5
- Symantec Backup Exec for Windows Servers 11d