CVE-2006-1297: Medium severity Symantec Veritas Backup Exec vulnerability

Published Mar 19, 2006

Updated

Unspecified vulnerability in Veritas Backup Exec for Windows Server Remote Agent 9.1 through 10.1, for Netware Servers and Remote Agent 9.1 and 9.2, and Remote Agent for Linux Servers 10.0 and 10.1 allow attackers to cause a denial of service (application crash or unavailability) due to "memory errors."

Affected Software

8 affected components

Symantec Veritas Backup Exec=netware_server_9.1

Symantec Veritas Backup Exec=netware_server_9.2

Symantec Veritas Backup Exec Remote Agent=netware_server_9.1

Symantec Veritas Backup Exec Remote Agent=netware_server_9.2

Symantec Veritas Backup Exec Remote Agent=unix_linux_server_10.1

Symantec Veritas Backup Exec Remote Agent=windows_server_9.1

Symantec Veritas Backup Exec Remote Agent=windows_server_10.0

Symantec Veritas Backup Exec Remote Agent=windows_server_10.1

Remediation

Patch Available

http://www.symantec.com/avcenter/security/Content/2006.03.17a.html

Event History

Mar 19, 2006

CVE Published

11:02 PM

Mar 20, 2006

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1297?

CVE-2006-1297 is classified as a denial of service vulnerability, potentially allowing attackers to crash or make the application unavailable.

How do I fix CVE-2006-1297?

To address CVE-2006-1297, ensure that your Symantec Veritas Backup Exec software is updated to the latest version that includes security patches.

What versions of Veritas Backup Exec are affected by CVE-2006-1297?

CVE-2006-1297 affects Symantec Veritas Backup Exec Remote Agent versions 9.1 through 10.1, including variations for Unix, Netware, and Windows servers.

What types of attacks can exploit CVE-2006-1297?

Exploitation of CVE-2006-1297 can lead to application crashes or unavailability, effectively causing a denial of service.

Is there a workaround to mitigate CVE-2006-1297?

While the best solution is to update the software, temporarily limiting access to the affected services may help mitigate the risk of exploitation of CVE-2006-1297.