Title

Symantec Backup Exec Arbitrary Code Execution Vulnerability (Cat II impact)

Discussion

Symantec has released a security advisory addressing multiple vulnerabilities affecting Symantec Backup Exec.  Symantec Backup Exec provides disk backup, tape backup and recovery support for various environments. To exploit these vulnerabilities, an attacker use various tactics, techniques and procedures to compromise the affected system. If successfully exploited, these vulnerabilities would allow an attacker to execute arbitrary code, obtain access to sensitive information, cause a denial of service resulting in the compromise of the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-39913

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.