Flaw Found in Symantec Backup Tool

By the Betanews Staff | Published November 29, 2006, 5:25 PM

Symantec has released a patch for its Veritas NetBackup software, saying it had discovered a buffer overflow vulnerability in the application. The flaw exists in the web programming language PHP, which NetBackup is partially written in. Successful exploitation would result in the attacker being able to take control of the affected system remotely.

This is the second time the NetBackup application has been found to have a buffer overflow issue. The last one was discovered in January, and was made worse when a security firm publicly disclosed exploit code for the issue. In this case, no known exploit is yet available, Symantec said in an advisory.

Comments

View comments by with a score of at least

Symantec releases a security fix for it's backup software monthly. How is this different?

http://secunia.com/search/?search=backup+exec

Symantec should realize that these vulns cause server downtime in patching, which negates the need for the software. We gave up on the constant backup exec vulnerabilities and ditched Symantec.

Score: 0

|

Symantec/Norton = GARBAGE.

They died YEARS ago.

Score: 0

|

#Das Mod ...exactly what I was thinking.

Who is critiquing someone else's security? Right...

Score: 0

|

here here

Score: 0

|

and this is from the company that says vista is unsafe and needs an anti-virus ??

lol, what a joke

Score: 0

|

Google Buzz: Another attempt to harness the content firehose

Similar to how Google successfully remolded RSS into a Google tool, the company now wants to remold Gmail into one big Google party

Success: Google's Nexus One shipping support line takes tech support questions

UPDATED Though the support line had been set up for shipping, it now appears Google personnel are happy to hear technical concerns.

Goodnight, moon: What I learned from a space shuttle

Carmi Levy | Wide Angle Zoom: Can the tech sector learn a few lessons from the space program? Certainly, if you believe in learning from someone else's mistakes.

Netflix to FCC: NBCU + Comcast could bypass net neutrality

Weaning itself from the post office as its main means of video transfer, Netflix would like someone to ensure the Internet remains just as unencumbered.

Rhapsody to become an independent company

RealNetworks and Viacom subsidiary MTV Networks have begun the process of spinning off music service Rhapsody into an independent company.

Nvidia debuts new dynamically-switched graphics card technology

Today, Nvidia announced that its Optimus technology for GPU switching will soon be available in a handful of Asus notebooks.

Google lowers 'unusually high' early termination fee on Nexus One

Google has lowered the Nexus One's early termination fees which were twice as high as the norm.

Netgear and Ericsson introduce a mobile broadband hotspot with a twist

It's a mobile broadband hotspot, but it's for use in the home.

Report: Streaming video drove 72% global increase in mobile data consumption

A new study says streaming video is "the single most influential factor driving the need for increased mobile network capacity."

Stymied by continuing Nexus One 3G issues, Google blames the environment

If you're still afflicted with the 3G flip-flop trouble, then you might consider moving. That appears to be the only suggestion Google can give for now.

Wolfram|Alpha makes a strong argument for virtual keyboards

"Answer engine" Wolfram|Alpha has updated its iPhone/iPod Touch app, harnessing the strength of the virtual keyboard.