Question about Symantec Security Advisory SYM09-002

[SOCKMIKEY]

IMy question is, does this vulnerability apply only to the server and not the client system?  I don't see anywhere saying it applies to the client (In our case a windows 2008 server). But our netbackup admins (Unix) state it applies to the server as well as the client.

Or is just a case of, we should be upgrading the client along with the server.....

Thanks,


Document ID: 317828
http://support.veritas.com/docs/317828

Symantec Security Advisory SYM09-002: A non-privileged but authorized system user could potentially leverage the NetBackup leverage the NetBackup network daemon (vnetd) to attempt to gain elevated privileges on the server.

 

[lu]

If you look at the available patches, it seems that the vnetd bug is present on the client and servers (unix+windows).

[CRZ]

This is a vnetd issue, and vnetd runs on both servers and clients, so it will affect both.

The good news is if you're at 6.5.4 or above, you've already patched this vulnerability!