VERITAS Backup Exec is a network backup solution for Windows and Netware servers.
VERITAS Backup Exec is affected by a buffer overflow when handling
**CONNECT_CLIENT_AUTH** requests with the Windows user authentication type. A very long password could overflow the buffer, leading to command execution.
Exploit works on Backup Exec 9.1 on Windows platforms.
Windows XP / Windows Server 2003