Veritas Backup Exec Server 10.0.5484 is vulnerable - Page 2 - HeapOverflow Computer Security Community & Forums : Heap Overflow.com

HeapOverflow Computer Security Community & Forums : Heap Overflow.com

		HeapOverflow Computer Security Community & Forums : Heap Overflow.com > Computer Security: Discussions > Security discussions
Veritas Backup Exec Server 10.0.5484 is vulnerable

Mark Forums Read

Notices

Welcome to you visitor! This community is mainly dedicated to the computer and security, if you're looking for DFind scanner or others exploits codes you will find them into the Projects section, feel free to start Blogging and remember to always keep an eye and start talking about security Advisories & public Exploits.

Security discussions Discuss about the computer security in general

Veritas Backup Exec Server 10.0.5484 is vulnerable

This is a discussion on "Veritas Backup Exec Server 10.0.5484 is vulnerable" within the Security discussions part of the Computer Security: Discussions section; nothing valuable found with other interfaces (even if I didnt try to reset scsi bus, lol). Anyway on a xp sp2 en not patched the reply from backup exec agent port is ...$....B..~...............................

Reply

Page 2 of 2

2

#11 (permalink)

Old

27-06-05

touk

Guest

Posts: n/a

Default

nothing valuable found with other interfaces (even if I didnt try to reset scsi bus, lol). Anyway on a xp sp2 en not patched the reply from backup exec agent port is ...$....B..~............................

Reply With Quote

Sponsor

Advertiser

#12 (permalink)

Old

27-06-05

class101 is offline

Administrator

Join Date: May 2005

Location: France

Age: 27

Posts: 592

Blog Entries: 3

Thanks: 18

Thanked 7 Times in 7 Posts

Rep Power: 10

class101 has disabled reputation

Send a message via MSN to class101

Default

lol , would be better in hexadecimal , and anyway in this first reply there is nothing interesting to grab, you can make some particular request to guss some os infos , etc

__________________
Security community webmaster
100% Free Directory
100% Cool milw0rm javascript

Reply With Quote

#13 (permalink)

Old

28-06-05

Guest

Posts: n/a

Default

class have you tried looking for non RFC standard requests in veritas?

Reply With Quote

#14 (permalink)

Old

28-06-05

class101 is offline

Administrator

Join Date: May 2005

Location: France

Age: 27

Posts: 592

Blog Entries: 3

Thanks: 18

Thanked 7 Times in 7 Posts

Rep Power: 10

class101 has disabled reputation

Send a message via MSN to class101

Default

lo nolimit, I have tested nothing yet in veritas else I had to find the mark's hole (lol the big flamer

)

__________________
Security community webmaster
100% Free Directory
100% Cool milw0rm javascript

Reply With Quote

#15 (permalink)

Old

29-06-05

suxac is offline

Junior Member

Join Date: Jun 2005

Posts: 25

Thanks: 0

Thanked 0 Times in 0 Posts

Rep Power: 10

suxac is on a distinguished road

Default

Quote:

Originally Posted by class101

btw kiddies are using http://www.metasploit.com/projects/Fram ... c_agent.pm to exploit it :> will see if I can code a scanner of it under free time.

eheh class, it will be also for kiddies but it works very well

I tested it on some vuln ips (with banner $...B..) ... i don't say one shell for every ip but nearly.....Only one thing I don't understand, it works only on .us, .or and .au ranges....in eu it seems to have difficulty....what could it be?

Reply With Quote

#16 (permalink)

Old

29-06-05

class101 is offline

Administrator

Join Date: May 2005

Location: France

Age: 27

Posts: 592

Blog Entries: 3

Thanks: 18

Thanked 7 Times in 7 Posts

Rep Power: 10

class101 has disabled reputation

Send a message via MSN to class101

Default

btw you can get [url=ftp://ftp.support.veritas.com/pub/support/products/Backup_Exec_for_WindowsNT/Q175168.BEWS10.0.5520.ESD_277181.zip:deca6]here[/url:deca6] the new veritas 10.0 build 5520 for win servers patched (the #5520 for netware still need hotfix) because if you look in the download section , you can get at this time the highly critical build (5484) and you'll have to install several hotfix then. Better is to grab the build #5520 here: http://seer.support.veritas.com/docs/277181.htm

__________________
Security community webmaster
100% Free Directory
100% Cool milw0rm javascript

Reply With Quote

#17 (permalink)

Old

30-06-05

Guest

Posts: n/a

Default

Quote:

Originally Posted by suxac

eheh class, it will be also for kiddies but it works very well

I tested it on some vuln ips (with banner $...B..) ... i don't say one shell for every ip but nearly.....Only one thing I don't understand, it works only on .us, .or and .au ranges....in eu it seems to have difficulty....what could it be?

Shell hacking is normally done to contribute to the warez community. As most of the real scene apparently is in europe, it's only logical that european servers would be the ones to be targetted first.
Abstract: .eu servers get hit first, and get patched first.

Reply With Quote

Sponsor

Advertiser

Reply

Page 2 of 2

2

Tags
1005484, backup, exec, server, veritas, vulnerable

« i-Gallery directory traversal | VERITAS = sleeping security response »

LinkBacks (?) LinkBack to this Thread: http://heapoverflow.com/f0rums/security-discussions/929-veritas-backup-exec-server-10-0-5484-vulnerable.html
Posted By	For	Type	Date
server - Members and Communities tagged with server - Zoints	This thread	Refback	07-01-08 15:20

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
CVE-2007-6017 (Backup Exec for Windows Server)	Heap	Advisories	0	29-02-08 23:47
CVE-2007-6016 (Backup Exec for Windows Server)	Heap	Advisories	0	29-02-08 23:47
Backup Exec System Recovery Manager 7.0.1 File Upload Exploit	Heap	Public	0	07-02-08 22:14
Mercury imap4 server remote buffer overflow exploit	Deumas-1	Public	1	24-09-05 12:29

heapoverflow.com - SEOmeter SEO tools

Locations of visitors to this page

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72