[Veritas-bu] NetBackup (possible root) Exploit (4.5,5.0,5.1,6 .0)!

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C5CF20.194D3300
Content-Type: text/plain


The Netbackup Servers here are in restricted Networks and not exposed! So I
might just pass on this! for the mo....! :-)
 
 

Simon Weaver 
Technical Support 
Windows Domain Administrator 

EADS Astrium 
Tel: 02392-705354 

Email: Simon.Weaver AT Astrium.eads DOT net 

-----Original Message-----
From: Piszcz, Justin [mailto:jpiszcz AT servervault DOT com] 
Sent: 12 October 2005 12:12
To: veritas-bu AT mailman.eng.auburn DOT edu
Subject: [Veritas-bu] NetBackup (possible root) Exploit (4.5,5.0,5.1,6.0)!



 

Better get patching! :-)

 

Dear Valued Symantec Customer,

 

This is to inform you that Symantec Enterprise Technical Support has

just issued a security alert. This is a critical technical issue for:

 

VERITAS NetBackup (tm) DataCenter 4.5 - including all present

Maintenance Packs and Feature Packs

 

VERITAS NetBackup (tm) BusinesServer 4.5 - including all present

Maintenance Packs and Feature Packs

 

VERITAS NetBackup (tm) Enterprise Server 5.0, 5.1, and 6.0 - including

all present Maintenance Packs for each version

 

VERITAS NetBackup (tm) Server 5.0, 5.1, and 6.0 - including all present

Maintenance Packs for each version

 

For a detailed description of this issue and our recommendations, please

review the following reference document:

 

http://support.veritas.com/docs/279085
<http://support.veritas.com/docs/279085>  

 



This email is for the intended addressee only.
If you have received it in error then you must not use, retain, disseminate or 
otherwise deal with it.
Please notify the sender by return email.
The views of the author may not necessarily constitute the views of EADS 
Astrium Limited.
Nothing in this email shall bind EADS Astrium Limited in any contract or 
obligation.

EADS Astrium Limited, Registered in England and Wales No. 2449259
Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England
------_=_NextPart_001_01C5CF20.194D3300
Content-Type: text/html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40"; xmlns:v = 
"urn:schemas-microsoft-com:vml" xmlns:o = 
"urn:schemas-microsoft-com:office:office" xmlns:w = 
"urn:schemas-microsoft-com:office:word" xmlns:st1 = 
"urn:schemas-microsoft-com:office:smarttags"><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<TITLE>Message</TITLE>

<META content="MSHTML 6.00.2900.2180" name=GENERATOR><o:SmartTagType 
name="City" 
namespaceuri="urn:schemas-microsoft-com:office:smarttags"></o:SmartTagType><o:SmartTagType
 
name="place" 
namespaceuri="urn:schemas-microsoft-com:office:smarttags"></o:SmartTagType><!--[if
 !mso]>
<STYLE>st1\:* {
        BEHAVIOR: url(#default#ieooui)
}
</STYLE>
<![endif]-->
<STYLE>@font-face {
        font-family: Wingdings;
}
@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.25in 1.0in 1.25in; }
P.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
LI.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
DIV.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
A:link {
        COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
        COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
        COLOR: purple; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
        COLOR: purple; TEXT-DECORATION: underline
}
SPAN.EmailStyle17 {
        COLOR: windowtext; FONT-FAMILY: Arial; mso-style-type: personal
}
SPAN.EmailStyle18 {
        COLOR: navy; FONT-FAMILY: Arial; mso-style-type: personal-reply
}
DIV.Section1 {
        page: Section1
}
</STYLE>
</HEAD>
<BODY lang=EN-US vLink=purple link=blue>
<DIV><SPAN class=079142811-12102005><FONT face=Arial color=#0000ff size=2>The 
Netbackup Servers here are in restricted Networks and not exposed! So I might 
just pass on this! for the mo....! :-)</FONT></SPAN></DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;</DIV>
<P align=left><SPAN lang=en-gb><B><FONT face=Arial color=#0000ff size=2>Simon 
Weaver</FONT></B></SPAN> <BR><SPAN lang=en-gb><B><FONT face=Arial color=#0000ff 
size=2>Technical Support</FONT></B></SPAN> <BR><SPAN lang=en-gb><B><FONT 
face=Arial color=#0000ff size=2>Windows Domain Administrator</FONT></B></SPAN> 
</P>
<P align=left><SPAN lang=en-gb><B><I><FONT face=Arial size=2>EADS 
Astrium</FONT></I></B><I></I></SPAN> <BR><SPAN lang=en-gb><B><I><FONT 
face=Arial 
size=2>Tel: 02392-705354</FONT></I></B><I></I></SPAN> </P>
<P align=left><SPAN lang=en-gb><B><FONT face=Arial color=#ff0000 size=2>Email: 
Simon.Weaver AT Astrium.eads DOT net</FONT></B></SPAN> </P>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
  <DIV></DIV>
  <DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left><FONT 
  face=Tahoma size=2>-----Original Message-----<BR><B>From:</B> Piszcz, Justin 
  [mailto:jpiszcz AT servervault DOT com] <BR><B>Sent:</B> 12 October 2005 
  12:12<BR><B>To:</B> veritas-bu AT mailman.eng.auburn DOT 
edu<BR><B>Subject:</B> 
  [Veritas-bu] NetBackup (possible root) Exploit 
  (4.5,5.0,5.1,6.0)!<BR><BR></FONT></DIV>
  <DIV class=Section1>
  <P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN 
  style="FONT-SIZE: 12pt"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face=Arial size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Better get patching! 
  </SPAN></FONT><FONT face=Wingdings size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: Wingdings">J</SPAN></FONT><FONT 
  face=Arial size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face=Arial size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 
Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'">Dear Valued Symantec 
  Customer,<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier 
New'"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'">This is to inform you 
that 
  Symantec Enterprise Technical Support has<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'">just issued a security 
  alert. This is a critical technical issue for:<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier 
New'"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'">VERITAS NetBackup (tm) 
  DataCenter 4.5 - including all present<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'">Maintenance Packs and 
  Feature Packs<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier 
New'"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'">VERITAS NetBackup (tm) 
  BusinesServer 4.5 - including all present<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'">Maintenance Packs and 
  Feature Packs<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier 
New'"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'">VERITAS NetBackup (tm) 
  <st1:place w:st="on"><st1:City w:st="on">Enterprise</st1:City></st1:place> 
  Server 5.0, 5.1, and 6.0 - including<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'">all present Maintenance 
  Packs for each version<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier 
New'"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'">VERITAS NetBackup (tm) 
  Server 5.0, 5.1, and 6.0 - including all present<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'">Maintenance Packs for 
each 
  version<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier 
New'"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'">For a detailed 
description 
  of this issue and our recommendations, please<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'">review the following 
  reference document:<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier 
New'"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face="Courier New" size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 'Courier New'"><A 
  
href="http://support.veritas.com/docs/279085";>http://support.veritas.com/docs/279085</A>
 
  <o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal><FONT face=Arial size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: 
Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P></DIV></BLOCKQUOTE></BODY></HTML>

<table><tr><td bgcolor=#ffffff><font color=#000000>This email is for the 
intended addressee only.<br>
If you have received it in error then you must not use, retain, disseminate or 
otherwise deal with it.<br>
Please notify the sender by return email.<br>
The views of the author may not necessarily constitute the views of EADS 
Astrium Limited.<br>
Nothing in this email shall bind EADS Astrium Limited in any contract or 
obligation.<br>
<br>
EADS Astrium Limited, Registered in England and Wales No. 2449259<br>
Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, 
England<br>
</font></td></tr></table>
------_=_NextPart_001_01C5CF20.194D3300--