CVE-2013-4678: Infoleak
Published Aug 4, 2013
·Updated
The NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote authenticated users to obtain sensitive host-version information via unspecified vectors.
Affected Software
5 affected components
Symantec Backup Exec=2010
Symantec Backup Exec=2010_r3-sp1
Symantec Backup Exec=2010_r3-sp2
Symantec Backup Exec=2012
Symantec Backup Exec=2012-sp1
Event History
Aug 4, 2013
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4678?
The severity of CVE-2013-4678 is classified as medium due to the potential exposure of sensitive host-version information.
2
How do I fix CVE-2013-4678?
To fix CVE-2013-4678, upgrade Symantec Backup Exec to version 2010 R3 SP3 or 2012 SP2 or later.
3
What versions of Symantec Backup Exec are affected by CVE-2013-4678?
CVE-2013-4678 affects versions 2010 R3 prior to SP3 and 2012 prior to SP2.
4
Who can exploit CVE-2013-4678?
Remote authenticated users can exploit CVE-2013-4678 to obtain sensitive host-version information.
5
What type of information can be accessed through CVE-2013-4678?
CVE-2013-4678 allows access to sensitive host-version information that could be used for further exploitation.