Patch summary for Security Advisories VX05-001, VX05-002, VX05-003, VX05-005, VX05-006, VX05-007

Details:

VERITAS Engineering has verified and addressed several security issues originally identified by iDefense Inc. and NGS Software Ltd. in the Backup Exec for Windows Servers and Backup Exec for NetWare Servers products. A hotfix has been developed for each of the affected versions to address these issues. Even though VERITAS Technical Services is unaware of any adverse customer impact from these vulnerabilities, we strongly recommend users of the affected products apply the appropriate upgrades and/or updates immediately to safeguard against threats of this nature.

VERITAS Technical Services recommends that the following Security patches are applied to the following versions of Backup Exec for Windows Servers and Backup Exec for NetWare Servers:

Note: Backup Exec 9.0 for Windows Servers installations should be upgraded to Backup Exec 9.1 rev. 4691 in order for all of the vulnerabilities to be addressed. Security Advisories VX05-005 and VX05-006 are not addressed in the patches listed below for Backup Exec 9.0 for Windows Servers.

VERITAS Backup Exec 9.0 rev. 4367 for Windows Servers Hotfix 21 http://support.veritas.com/docs/276156

VERITAS Backup Exec 9.0 rev. 4454 for Windows Servers Hotfix 31 http://support.veritas.com/docs/275911

VERITAS Backup Exec 9.1 rev. 4691 for Windows Servers Service Pack 4 http://support.veritas.com/docs/279308

VERITAS Backup Exec 10.0 rev. 5484 for Windows Servers Hotfix 24

(includes Backup Exec for Windows Servers Remote Agent for Windows Servers fix) http://support.veritas.com/docs/275514

or

VERITAS Backup Exec 10.0 rev. 5484 for Windows Servers - upgrade to Backup Exec 10.0 rev. 5520

(includes Backup Exec for Windows Servers Remote Agent for Windows Servers fix) http://support.veritas.com/docs/277181

VERITAS Backup Exec 10.0 rev. 5484 and 5520 for Windows Servers

(Backup Exec for Windows Servers Remote Agent for NetWare Servers Fix Only) http://support.veritas.com/docs/277478

VERITAS Backup Exec 9.0 rev. 4202 for NetWare Servers Hotfix 1 http://support.veritas.com/docs/277423

VERITAS Backup Exec 9.1 rev. 1156 for NetWare Servers (Installation Files) http://support.veritas.com/docs/277421

These patches were developed to address the following VERITAS Software Security Advisories:

VX05-001, VX05-002, VX05-003, VX05-005, VX05-006, VX05-007

In depth descriptions of the security issues resolved by each patch are provided below:

VERITAS Software Security Advisory VX05-001

http://support.veritas.com/docs/276533

VERITAS Software Security Advisory VX05-002

http://support.veritas.com/docs/276604

VERITAS Software Security Advisory VX05-003

http://support.veritas.com/docs/276605

VERITAS Software Security Advisory VX05-005

http://support.veritas.com/docs/276606

VERITAS Software Security Advisory VX05-006

http://support.veritas.com/docs/276607

VERITAS Software Security Advisory VX05-007

http://support.veritas.com/docs/276608

Related Documents:

http://support.veritas.com/docs/264658

http://support.veritas.com/docs/277181

http://support.veritas.com/docs/277478

http://support.veritas.com/docs/279308

Products Applied:
Backup Exec for NetWare 9.0, 9.1
Backup Exec for Windows Servers 10.0, 9.0, 9.1

Last Updated: October 14 2005 02:25 PM GMT
Expires on: 365 days from publish date

Subscribe to receive critical updates about this document

Subjects:
Backup Exec for NetWare
Application: Security
Backup Exec for Windows Servers
Application: Patch

Languages:
English (US), French, German, Spanish, Italian, Japanese, Chinese

Operating Systems:
Windows 2000

Advanced Server, Advanced Server SP1, Advanced Server SP2, Advanced Server SP3, Advanced Server SP4, Advanced Server Windows Powered, Advanced Server Windows Powered SP1, Advanced Server Windows Powered SP2, Advanced Server Windows Powered SP3, Advanced Server Windows Powered SP4, Datacenter Server, Datacenter Server SP1, Datacenter Server SP2, Datacenter Server SP3, Datacenter Server SP4, Professional, Professional SP1, Professional SP2, Professional SP3, Professional SP4, SAK, Server, Server SP1, Server SP2, Server SP3, Server SP4, Server Windows Powered, Server Windows Powered SP1, Server Windows Powered SP2, Server Windows Powered SP3, Server Windows Powered SP4

Windows XP

5.2, Home 5.1, Home 5.1 SP1, Home 5.1 SP2, Pro 5.1, Pro 5.1 64 bit SP1, Pro 5.1 64 bit SP2, Pro 5.1 64-bit, Pro 5.1 SP1, Pro 5.1 SP2

Windows Server 2003

DataCenter, DataCenter (IA64), DataCenter (x64), DataCenter SP1, DataCenter SP1(IA64), Enterprise (IA64), Enterprise SP1(IA64), Enterprise Server, Enterprise ServerSP1, Standard Server, Standard Server SP1, Standard Server(x64), Storage Server, Storage Server SP1, Web Server, Web Server SP1

Windows Small Business Server 2003

Premium Edition, Standard Edition

Symantec World Headquarters:
20330 Stevens Creek Blvd. Cupertino, CA 95014
World Wide Web: http://www.symantec.com,
Tech Support Web: http://entsupport.symantec.com,
E-Mail Support: http://seer.entsupport.symantec.com/email_forms,
FTP: ftp://ftp.entsupport.symantec.com or http://ftp.entsupport.symantec.com

THE INFORMATION PROVIDED IN THE SYMANTEC SOFTWARE KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. SYMANTEC SOFTWARE DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL SYMANTEC SOFTWARE OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES,EVEN IF SYMANTEC SOFTWARE OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.