Document ID: 275514
http://support.veritas.com/docs/275514
E-Mail Colleague IconE-Mail this document to a colleague

10.0.5484 Hotfix 24 - Backup Exec for Windows Servers May 2005 Security Rollup *Requires Backup Exec 10.0.5484 Service Pack 1

Details:
To which versions of VERITAS Backup Exec (tm) for Windows Servers can this hotfix be applied?

This hotfix can only be applied to the following versions of Backup Exec for Windows Servers:

Backup Exec 10.0 for Windows Servers revision 5484

Note:  Backup Exec 10.0 for Windows Servers revision 5484 Service Pack 1 is required to install this hotfix.


What issue does this hotfix resolve?

This hotfix resolves the following issues:
Security Advisories VX05-001, VX05-002, VX05-003, VX05-005, VX05-006, VX05-007
Please see the complete details of each security advisory in the Related Documents section below.



Which files does this hotfix update?

After installing the hotfix, these will be the attributes of the installed files.  The date and time are stored in Universal Time.  When looking at the date and time of the file(s) on the server where the hotfix was installed, they will be converted to local time.  Use the Date and Time tool provided by Windows to determine the difference between universal time and local time.

Backup Exec Media Servers

Under C:\Program Files\VERITAS\Backup Exec\NT (By default):
 
File NameDateTimeVersionSize
bengine.exe05/16/053:53:06 PM10.0.5484.191,633,368
beremote.exe05/16/053:53:02 PM10.0.5484.19503,896
beserver.exe04/08/051:31:06 PM10.0.5484.133,300,952
bkupexec.exe04/07/059:32:28 PM10.0.5484.135,607,512
beclass.dll05/16/053:52:14 PM10.0.5484.19520,792
bedssps2.dll05/16/053:52:44 PM10.0.5484.19221,272
msgq.dll04/07/059:31:30 PM10.0.5484.13302,680
ndmpcomm.dll05/16/053:52:52 PM10.0.5484.19100,952
ndmpsrvr.dll05/16/053:52:58 PM10.0.5484.191,214,040
storex.ocx04/07/059:32:46 PM10.0.5484.131,230,424
\%WINDIR%\System32\ServerAppliance\web\Admin\BE\storex.cab (Applicable only if Backup Exec Web Administration console is installed)04/07/059:33:32 PM 3,741,626

 
Remote Agent for Windows Servers

Under C:\Program Files\VERITAS\Backup Exec\RANT:
 
File NameDateTimeVersionSize
beremote.exe05/16/053:53:02 PM10.0.5484.19503,896
beclass.dll05/16/053:52:14 PM10.0.5484.19520,792
bedssps2.dll05/16/053:52:44 PM10.0.5484.19221,272
ndmpcomm.dll05/16/053:52:52 PM10.0.5484.19100,952
ndmpsrvr.dll05/16/053:52:58 PM10.0.5484.191,214,040

 
   
How to install this hotfix:

This hotfix must be applied to all Backup Exec media servers.  Follow the steps listed under the section titled "Installation Procedures" to install the hotfix.

Special Installation Instructions

This section contains additional installation instructions for this hotfix.

Remote Agent for Windows Servers - 32 bit

After installing this Hotfix to the Backup Exec 10.0 media server, install the Remote Agent for Windows Servers (RAWS) to all of the remote computers protected by Backup Exec by following the Remote Agent for Windows Servers installation procedure in the Backup Exec Administrator's Guide. If RAWS is installed on a SAP R/3 computer, or on a x64 bit computer or 64 bit (Itanium) computer, see the Special Installation Instructions below.


Remote Agent for Windows Servers (RAWS) - 64 bit (Itanium)

After installing this hotfix to the Backup Exec 10.0 media server, you must reinstall the "Remote Agent for Windows Servers" to all 64 bit computers being protected by Backup Exec. To reinstall the Remote Agent, type the following from the 64 bit computer:

msiexec.exe /p "<path>\RAWS64EX.msp" REINSTALL=ALL REINSTALLMODE=omus

Note 1: <path> = path to the \Backup Exec\NT\Agents\RANT64 directory on the Backup Exec media server
Note 2: This service pack can only patch previous installations of the Backup Exec Remote Agent 64bit (it does not patch the original installation source files for the Remote Agent for 64 bit computers). This service pack places a "patch" file (RAWS64.msp) in the \Backup Exec\NT\Agents\RANT64 directory on the media server. If installing the Backup Exec Remote Agent for 64 bit computers to additional 64 bit computers in the future, run the command above after the initial agent installation to install the patch.


Remote Agent for Windows Servers (RAWS) - Extended 64 bit (x64)

After installing this hotfix to the Backup Exec 10.0 media server, you must reinstall the "Remote Agent for Windows Servers" to all x64 bit computers being protected by Backup Exec. To reinstall the Remote Agent, type the following from the x64 bit computer:

msiexec.exe /p "<path>\RAWS64EX.msp" REINSTALL=ALL REINSTALLMODE=omus

Note 1: <path> = path to the \Backup Exec\NT\Agents\RANT64EX directory on the Backup Exec media server
Note 2: This service pack can only patch previous installations of the Backup Exec Remote Agent x64 (it does not patch the original installation source files for the Remote Agent for x64 bit computers). This service pack places a "patch" file (RAWS64EX.msp) in the \Backup Exec\NT\Agents\RANT64EX directory on the media server. If installing the Backup Exec Remote Agent for x64 bit computers to additional x64 bit computers in the future, run the command above after the initial agent installation to install the patch.


Microsoft Cluster

Before installing the hotfix to Backup Exec 10.0 media servers on each node of a Microsoft cluster, stop the Backup Exec services using "Cluster Administrator".


Central Administration Servers (CASO only)

Before installing the hotfix on a Backup Exec 10.0 Central Administration Server (CAS), communication must be disabled between the CAS and all Managed Media Servers (MMS).  
1.  Open the Backup Exec User Interface.
2.  Click on the Media Servers Button.
3.  Right click on each MMS and uncheck "Communication Enabled"

After the hotfix is installed, enable communication between the CAS and all MMS's.  
1.  Open the Backup Exec User Interface.
2.  Click on the Media Servers Button.
3.  Right click on each MMS and check "Communication Enabled"


Agent for R/3 for Oracle

After installing this hotfix to the Backup Exec 10.0 media server, you must reinstall the "Remote Agent for Windows Servers" to all SAP R/3 computers being protected by Backup Exec. To reinstall the Remote Agent, type the following from the SAP R/3 server:

msiexec.exe /p "<path>\SAPR3.msp" REINSTALL=ALL REINSTALLMODE=omus

Note 1: <path> = path to the \Backup Exec\NT\Agents\R3 directory on the Backup Exec media server
Note 2: This service pack can only patch previous installations of the Backup Exec Agent for R/3 for Oracle (it does not patch the original installation source files for the Agent for R/3 for Oracle). This service pack places a "patch" file (SAPR3.msp) in the \Backup Exec\NT\Agents\R3 directory on the media server. If installing the Backup Exec Agent for R/3 for Oracle to additional SAP R/3 computers in the future, run the command above after the initial agent installation to install the patch.


Installation Procedures

To install the hotfix on a Backup Exec media server, download the hotfix. A prompt will appear asking whether to open or save the download. Perform either of the following:

Select "Open" to automatically patch the installation of Backup Exec 10.0

- or -

Select "Save" to save the download to the computer in order to install the hotfix later


Uninstalling the Hotfix:

Important:  Once installed, this Backup Exec hotfix cannot be uninstalled.


Download Now  -  11451 K
File Name: be5484RHF24_275514.exe
File Type: Patch

Click Below to Browse the FTP files by Product:
ftp.support.veritas.com/pub/support/products



Supplemental Material:

System: Ref.#Description
ETrack: 309194 Storex and UI buffer overrun situations encountered when entering server and credentials
ETrack: 311063 Unable to label blank media in a library
ETrack: 319131 Buffer overrun situation Unauthenticated Remote Stack Overflow
ETrack: 320650 Backup Exec Server Remote Registry Access Vulnerability
ETrack: 320446 Backup Exec Agent Remote Buffer Overflow Vulnerability
ETrack: 320447 Backup Exec Agent Remote Denial of Service Vulnerability
ETrack: 322820 Duplicate Handle Access Security Vulnerability


Products Applied:
 Backup Exec for Windows Servers 10.0, 10.0 5484

Last Updated: May 31 2006 02:23 PM GMT
Expires on: 365 days from publish date
Subscribe Via E-Mail IconSubscribe to receive critical updates about this document

Subjects:
 Backup Exec for Windows Servers
   Application: Backup, Configuration, Faq, How To, Patch, Troubleshooting

Languages:
 Russian, English (US), French, German, Spanish, Italian, Japanese, Chinese, Korean

Operating Systems:
Windows 2000

Advanced Server, Advanced Server Windows Powered, Datacenter Server, Professional, SAK, Server, Server Windows Powered

Windows NT Small Business Server

2000

Windows XP

Home 5.1, Pro 5.1

Windows Server 2003

DataCenter, Enterprise Server, Standard Server, Storage Server, Web Server

Windows Small Business Server 2003

Premium Edition, Standard Edition