Detections
Analytics
Symantec Backup Exec for Windows Servers Denial of Service Vulnerabilities
high Nessus Plugin ID 28361
Synopsis
The remote Windows host contains an application that is affected by several denial of service vulnerabilities.Description
Backup Exec for Windows Servers, a commercial backup product from Symantec, is installed on the remote host.The version of the Backup Exec Job Engine, bengine.exe, installed as part of Backup Exec for Windows Server on the remote host contains a NULL pointer dereference error when handling exceptions. Using a specially crafted packet, an attacker can leverage this issue to crash the affected service.
In addition, it is affected by two overflow errors that can cause the service to enter an infinite loop, resulting in high CPU utilization and / or memory exhaustion.
Solution
Apply the appropriate hotfix according to the vendor advisories above.See Also
https://secuniaresearch.flexerasoftware.com/secunia_research/2007-74/advisory/
https://www.securityfocus.com/archive/1/484318/30/0/threaded
https://www.securityfocus.com/archive/1/484333/30/0/threaded
Plugin Details
Severity: High
ID: 28361
File Name: bews_dos.nasl
Version: 1.15
Type: local
Agent: windows
Family: Windows
Published: 11/29/2007
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: cpe:/a:symantec:veritas_backup_exec
Required KB Items: SMB/Registry/Enumerated
Exploit Ease: No known exploits are available
Reference Information
CVE: CVE-2007-4346, CVE-2007-4347