OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Veritas Backup Exec Name Service Remote Universal Exploit

From: Keif Gwinn (Keif.GwinnHOSTWAY-UK.COM)
Date: Wed Jan 12 2005 - 06:13:00 CST

Hi,

I've just been made aware of this remote exploit for machines running the
following versions of Backup Exec ;

VERITAS Backup Exec v9.1.4691.SP1
v9.1.4691.SP0
v8.5.3572

http://seer.support.veritas.com/docs/273419.htm
http://www.k-otik.com/exploits/20050111.101_BXEC.cpp.php

and as I'd not seen a notification on this list of it yet, and given that
alot of people will be using Backup Exec I thought I'd let you know.

-
Keif Gwinn
Hostway, The Hosting Company
6 Harbour Exchange Sq.
London E14 9HE
Tel / +44 207 538 8000
Fax / +44 207 538 8001
www.hostway.co.uk

--
NTBugtraq Editor's Note:

Most viruses these days use spoofed email addresses. As such, using an Anti-Virus product which automatically notifies the perceived sender of a message it believes is infected may well cause more harm than good. Someone who did not actually send you a virus may receive the notification and scramble their support staff to find an infection which never existed in the first place. Suggest such notifications be disabled by whomever is responsible for your AV, or at least that the idea is considered.
--