http://seer.support.veritas.com/docs/276604.htm
national Cyber Alert System
Technical Cyber Security Alert TA05-180A archive
VERITAS Backup Exec Software is actively being exploited
Original release date: June 29, 2005
Last revised: --
Source: US-CERT
Systems Affected
VERITAS Backup Exec Remote Agent
Overview
The VERITAS Backup Exec Remote Agent for Windows contains a buffer overflow that may allow an unauthenticated, remote attacker to compromise a system and execute arbitrary code with administrative privileges.
---------------------------------------------------------------
Hello,
I don't understand how this security alert applies to 99.9% of the BE install base. I would assume all BE servers are behind a firewall that do not have port 10,000 open to the public.
Can you share more info how this relates to BE admin's and if we really need to apply the patch?
Thanks.
-Josh