Detections
Analytics
Symantec Backup Exec Server Multiple Vulnerabilities (SYM13-009)
medium Nessus Plugin ID 69263
Language:
Synopsis
The remote Windows host contains a backup server that is affected by multiple vulnerabilities.Description
According to its version number, the Symantec Backup Exec Server installed on the remote Windows host is affected by multiple vulnerabilities :- Multiple cross-site scripting vulnerabilities exist in the management console and the beutility console.
(CVE-2013-4676)
- Backup and restore data files are stored with weak ACLs, allowing read/write access to everyone. (CVE-2013-4677)
- The NMDP protocol leaks host versioning information.
(CVE-2013-4678)
Solution
Upgrade to Symantec Backup Exec 2010 R3 SP3, 2012 SP2 or later.See Also
Plugin Details
Severity: Medium
ID: 69263
File Name: symantec_backup_exec_server_sym13-009.nasl
Version: 1.8
Type: local
Agent: windows
Family: Windows
Published: 8/8/2013
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.2
Vector: CVSS2#AV:L/AC:L/Au:S/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:symantec:veritas_backup_exec
Required KB Items: SMB/Symantec_Backup_Exec_Server/version
Exploit Ease: No known exploits are available
Patch Publication Date: 8/1/2013
Vulnerability Publication Date: 8/1/2013