Backup Exec for Windows Alert

[SQLBill]

Symantec (Backup Exec's new owner) has a warning out about BE along with the Remote Agent for Windows and Remote Agent for Linux/Unix.

There is a vulnerability that can allow an unauthorized remote attacker to download arbitrary files.

Check out the Symantec web site for the patches. (For 8.6 there is only a 'work around' since it is at the 'end-of-life).

-SQLBill

Posting advice: FAQ481-4875

 

[steveot]

Here are the links to add to Bills Comment for all Version

VERITAS Backup Exec for Windows Servers Security Advisory: Unauthorized downloading of arbitrary files

http://seer.support.veritas.com/docs/278434.htm

As a side note there are web sites out there that have published the source code and compilers to easily crete/run this exploit.