Details:
GDM 5.0GA Pack NB_GDM_50_7_M README December 5, 2006
Requirement: NB_CLT_50_7_M
================================================================================
** All 5.0 MP7 Maintenance Packs for NetBackup server, client, all Add-on
products, Database Agents, and Java user interface must be applied so that the
entire system is at the same Maintenance Pack level. **

This Maintenance Pack provides updates and fixes for Veritas NetBackup (tm)
Global Data Manager (GDM) for UNIX servers.
================================================================================


=================
PACK DEPENDENCIES
=================

-- Installation of this Maintenance Pack requires version 1.17.4.40 of the
Vrts_pack.install.

-- NB_CLT_50_7_M Maintenance Pack must be installed prior to
installing this Maintenance Pack.


I. DOWNLOAD INSTRUCTIONS
II. KNOWN ISSUES
III. INSTALLATION INSTRUCTIONS
IV. UNINSTALL INSTRUCTIONS
V. DESCRIPTION OF PROBLEMS FIXED
Current Pack
NB_GDM_50_7_M

Pack History
None


=========================
I. DOWNLOAD INSTRUCTIONS
=========================
1) Download NB_GDM_50_7_M_<6 digit number>.<platform>.tar into the
/tmp directory.

where <6 digit number> is an internal tracking identifier

where <platform> is: alpha_5, hp_ux, linux, rs6000, solaris

2) Extract NB_GDM_50_7_M_<6 digit number>.<platform>.tar
/bin/tar -xvf NB_GDM_50_7_M_<6 digit number>.<platform>.tar

This will create the files:
Vrts_pack.install
VrtsNB_GDM_50_7_M.README
VrtsNB_GDM_50_7_M.<platform>.tar.Z



=================
II. KNOWN ISSUES
=================
There are no known issues associated with this Maintenance Pack.



==============================
III. INSTALLATION INSTRUCTIONS
==============================
As root on the NetBackup for Global Data Manager client:

1) Install Maintenance Pack binaries.

cd /tmp
/bin/sh Vrts_pack.install



============================
IV. UNINSTALL INSTRUCTIONS
============================
Note: This will ONLY uninstall the Maintenance Pack from your local machine.

1) Close the NetBackup user interfaces.

Make sure the NetBackup server has no active jobs running (for
example, backups, restores, or duplications).

If a database agent is being used, such as Oracle,
ensure that the database services are stopped.

2) Change directory to the patch save directory.
Substitute the pack name for ${PACK} in the following command:

cd /usr/openv/pack/${PACK}/save

3) Run the un-install script:

./Vrts_pack.uninstall

4) Verify that the pack uninstalled successfully by checking
/usr/openv/pack/pack.history.

5) If update_clients was run after the pack was originally INSTALLED,
run it again after that pack is successfully UNINSTALLED.

6) If necessary, restart the NetBackup and Media Manager daemons:
/usr/openv/netbackup/bin/goodies/netbackup start



==================================
V. DESCRIPTION OF PROBLEMS FIXED
==================================
The following are descriptions of the problems fixed.
Please read the entire document before installing.

README Conventions:

Description
Describes particular problem or feature contained in this pack.

** Description **
Describes a problem that can lead to potential data loss. Please
read these problem descriptions carefully.

Workaround
Any available workarounds to a problem are also listed. Workarounds
can be used INSTEAD of applying the patch, however, Symantec strongly
recommends that you are at the latest patch level.

Additional Notes
Any additional information regarding a problem is included.




=============
Current pack
=============

================================================================================
Etrack Incident = ET520521

Description:
A stack-based buffer overflow vulnerability existed in the volume manager
daemon (vmd) running on NetBackup servers. If an attacker was able to
gain access to a vulnerable NetBackup server and successfully exploit this
issue, it could have lead to arbitrary code execution and resulted in
unauthorized access with elevated privileges on the targeted system.

This vulnerability impacted only NetBackup server systems and did not
impact NetBackup client systems.
--------------------------------------------------------------------------------
Etrack Incident = ET538175 ET537660 ET538160 ET537509 ET537473 ET537518 ET537526
ET537535 ET537555 ET537412 ET542502

Description:
Multiple buffer overflow vulnerabilities have been identified in daemons
that run on Veritas NetBackup master, media, and client servers. An
attacker, if able to access a vulnerable Veritas NetBackup server and
successfully exploit these issues, could potentially execute arbitrary
code resulting in possible unauthorized and elevated privilege access to
the targeted system.

For more information about this vulnerability, refer to TechNote 281521 on
the Symantec Support Web site (http://support.veritas.com/docs/281521 ).
--------------------------------------------------------------------------------
Etrack Incident = ET575347 ET609338 ET609487 ET609540 ET608376 ET609623 ET614668
ET612687 ET616976 ET617837 ET616940 ET622225 ET624432 ET633297 ET641183 ET699951
ET701953 ET781198 ET597210 ET598796 ET575338 ET596635 ET612761 ET787052 ET788824
ET786896 ET814652

Description:
Buffer overflow areas have been identified and corrected in daemons running
on Veritas NetBackup master, media, and client servers. Successful access
to a vulnerable Veritas NetBackup server and the ability to successfully
execute arbitrary code could potentially result in unauthorized access with
elevated privilege on a system.
================================================================================



============
Pack History
============

None

Download Now  -  29186 K
File Name: NB_GDM_50_7_M_286266.hp_ux.tar
File Type: Patch

Click Below to Browse the FTP files by Product:
ftp.support.veritas.com/pub/support/products

Related Documents:

281521: Symantec Security Advisory SYM06-006: Multiple overflow vulnerabilities exist in Veritas NetBackup (tm) daemons that could potentially lead to execution of arbitrary code resulting in possible unauthorized, elevated privileged access to the targeted system.
 http://support.veritas.com/docs/281521

---