Veritas-bu

[Veritas-bu] NetBackup (possible root) Exploit (4.5,5.0,5.1, 6.0)!

2005-10-12 12:09:12
Subject: [Veritas-bu] NetBackup (possible root) Exploit (4.5,5.0,5.1, 6.0)!
From: Mark.Donaldson AT cexp DOT com (Mark.Donaldson AT cexp DOT com)
Date: Wed, 12 Oct 2005 10:09:12 -0600
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C5CF47.32E5807A
Content-Type: text/plain;
        charset="iso-8859-1"

What's the penalty for just disabling the port in the /etc/services or
/etc/inetd.conf files?

-----Original Message-----
From: Piszcz, Justin [mailto:jpiszcz AT servervault DOT com] 
Sent: 12 October 2005 12:12
To: veritas-bu AT mailman.eng.auburn DOT edu
Subject: [Veritas-bu] NetBackup (possible root) Exploit (4.5,5.0,5.1,6.0)!
 
Better get patching! J
 
Dear Valued Symantec Customer,
 
This is to inform you that Symantec Enterprise Technical Support has
just issued a security alert. This is a critical technical issue for:
 
VERITAS NetBackup (tm) DataCenter 4.5 - including all present
Maintenance Packs and Feature Packs
 
VERITAS NetBackup (tm) BusinesServer 4.5 - including all present
Maintenance Packs and Feature Packs
 
VERITAS NetBackup (tm) Enterprise Server 5.0, 5.1, and 6.0 - including
all present Maintenance Packs for each version
 
VERITAS NetBackup (tm) Server 5.0, 5.1, and 6.0 - including all present
Maintenance Packs for each version
 
For a detailed description of this issue and our recommendations, please
review the following reference document:
 
http://support.veritas.com/docs/279085 
 
This email is for the intended addressee only.
If you have received it in error then you must not use, retain, disseminate
or otherwise deal with it.
Please notify the sender by return email.
The views of the author may not necessarily constitute the views of EADS
Astrium Limited.
Nothing in this email shall bind EADS Astrium Limited in any contract or
obligation.

EADS Astrium Limited, Registered in England and Wales No. 2449259
Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS,
England


This email is for the intended addressee only.
If you have received it in error then you must not use, retain, disseminate
or otherwise deal with it.
Please notify the sender by return email.
The views of the author may not necessarily constitute the views of EADS
Astrium Limited.
Nothing in this email shall bind EADS Astrium Limited in any contract or
obligation.

EADS Astrium Limited, Registered in England and Wales No. 2449259
Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS,
England

------_=_NextPart_001_01C5CF47.32E5807A
Content-Type: text/html;
        charset="iso-8859-1"

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2658.2">
<TITLE>RE: [Veritas-bu] NetBackup (possible root) Exploit  (4.5,5.0,5.1, 
6.0)!</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=2>What's the penalty for just disabling the port in the 
/etc/services or /etc/inetd.conf files?</FONT>
</P>

<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Piszcz, Justin [<A HREF="mailto:jpiszcz AT servervault 
DOT com">mailto:jpiszcz AT servervault DOT com</A>] </FONT>
<BR><FONT SIZE=2>Sent: 12 October 2005 12:12</FONT>
<BR><FONT SIZE=2>To: veritas-bu AT mailman.eng.auburn DOT edu</FONT>
<BR><FONT SIZE=2>Subject: [Veritas-bu] NetBackup (possible root) Exploit 
(4.5,5.0,5.1,6.0)!</FONT>
<BR><FONT SIZE=2>&nbsp;</FONT>
<BR><FONT SIZE=2>Better get patching! J</FONT>
<BR><FONT SIZE=2>&nbsp;</FONT>
<BR><FONT SIZE=2>Dear Valued Symantec Customer,</FONT>
<BR><FONT SIZE=2>&nbsp;</FONT>
<BR><FONT SIZE=2>This is to inform you that Symantec Enterprise Technical 
Support has</FONT>
<BR><FONT SIZE=2>just issued a security alert. This is a critical technical 
issue for:</FONT>
<BR><FONT SIZE=2>&nbsp;</FONT>
<BR><FONT SIZE=2>VERITAS NetBackup (tm) DataCenter 4.5 - including all 
present</FONT>
<BR><FONT SIZE=2>Maintenance Packs and Feature Packs</FONT>
<BR><FONT SIZE=2>&nbsp;</FONT>
<BR><FONT SIZE=2>VERITAS NetBackup (tm) BusinesServer 4.5 - including all 
present</FONT>
<BR><FONT SIZE=2>Maintenance Packs and Feature Packs</FONT>
<BR><FONT SIZE=2>&nbsp;</FONT>
<BR><FONT SIZE=2>VERITAS NetBackup (tm) Enterprise Server 5.0, 5.1, and 6.0 - 
including</FONT>
<BR><FONT SIZE=2>all present Maintenance Packs for each version</FONT>
<BR><FONT SIZE=2>&nbsp;</FONT>
<BR><FONT SIZE=2>VERITAS NetBackup (tm) Server 5.0, 5.1, and 6.0 - including 
all present</FONT>
<BR><FONT SIZE=2>Maintenance Packs for each version</FONT>
<BR><FONT SIZE=2>&nbsp;</FONT>
<BR><FONT SIZE=2>For a detailed description of this issue and our 
recommendations, please</FONT>
<BR><FONT SIZE=2>review the following reference document:</FONT>
<BR><FONT SIZE=2>&nbsp;</FONT>
<BR><FONT SIZE=2><A HREF="http://support.veritas.com/docs/279085"; 
TARGET="_blank">http://support.veritas.com/docs/279085</A> </FONT>
<BR><FONT SIZE=2>&nbsp;</FONT>
<BR><FONT SIZE=2>This email is for the intended addressee only.</FONT>
<BR><FONT SIZE=2>If you have received it in error then you must not use, 
retain, disseminate or otherwise deal with it.</FONT>
<BR><FONT SIZE=2>Please notify the sender by return email.</FONT>
<BR><FONT SIZE=2>The views of the author may not necessarily constitute the 
views of EADS Astrium Limited.</FONT>
<BR><FONT SIZE=2>Nothing in this email shall bind EADS Astrium Limited in any 
contract or obligation.</FONT>
</P>

<P><FONT SIZE=2>EADS Astrium Limited, Registered in England and Wales No. 
2449259</FONT>
<BR><FONT SIZE=2>Registered Office: Gunnels Wood Road, Stevenage, 
Hertfordshire, SG1 2AS, England</FONT>
</P>
<BR>

<P><FONT SIZE=2>This email is for the intended addressee only.</FONT>
<BR><FONT SIZE=2>If you have received it in error then you must not use, 
retain, disseminate or otherwise deal with it.</FONT>
<BR><FONT SIZE=2>Please notify the sender by return email.</FONT>
<BR><FONT SIZE=2>The views of the author may not necessarily constitute the 
views of EADS Astrium Limited.</FONT>
<BR><FONT SIZE=2>Nothing in this email shall bind EADS Astrium Limited in any 
contract or obligation.</FONT>
</P>

<P><FONT SIZE=2>EADS Astrium Limited, Registered in England and Wales No. 
2449259</FONT>
<BR><FONT SIZE=2>Registered Office: Gunnels Wood Road, Stevenage, 
Hertfordshire, SG1 2AS, England</FONT>
</P>

</BODY>
</HTML>
------_=_NextPart_001_01C5CF47.32E5807A--