This host is installed with Symantec Backup Exec Products and is prone to arbitrary command execution vulnerability.

Successful exploitation will allow remote attackers to cause privilege escalation by executing post authentication NDMP commands. Impact Level: Application.

Upgrade to the Symantec Backup Exec 2010 R3 For updates refer to http://www.symantec.com/business/products/family.jsp?familyid=backupexec

The flaw is due to weakness in communication protocol implementation and lack of validation of identity information exchanged between media server and remote agent.

Symantec Backup Exec for Windows Servers versions 11.0, 12.0, 12.5 Symantec Backup Exec 2010 versions 13.0, 13.0 R2

• http://secunia.com/advisories/44698
• http://www.symantec.com/business/security_response/securityupdates/detail.jsp?

---

Updated on 2015-03-25