The Backup Exec Continuous Protection Server (CPS) version of the Backup Exec Remote Agent for Windows Servers (RAWS) contains security vulnerabilities in which a specifically malformed packet could result in a process crash or a denial of service (DoS) preventing ongoing backup capability until the Backup Exec Remote Agent Service is restarted.

Because CPS provides an independent installation source for the Backup Exec Remote Agent for Windows Servers, all CPS servers should be considered vulnerable and eligible for update. Symantec Technical Support advises that all BECPS systems should be updated with the patch for BECPS RAWS that is referenced in this article.

This issue was first discovered during testing of the CPS version of the Backup Exec Remote Agent for Windows Servers, subsequent to the release of the Backup Exec for Windows Servers Hotfix 24 that addresses the same issue for the Backup Exec for Windows Servers version of RAWS.

For additional details on the security vulnerability please review:

Symantec Security Advisory SYM06-004
 http://support.veritas.com/docs/282255

Backup Exec CPS SP1 Hotfix 2 can be downloaded from the following URL:
 http://support.veritas.com/docs/283478