CVE-2008-5407

CVE-2008-5407 affects Symantec Backup Exec for Windows Servers (11.x and 12.x families) with vulnerabilities in the remote-agent logon process that allow remote attackers to bypass authentication and read or delete files via unknown vectors. Related CVE-2008-5408 describes a buffer overflow in th...

CVE-2007-6016

CVE-2007-6016 affects the PVATLCalendar.PVCalendar.1 ActiveX control (pvcalendar.ocx) in the Symantec Backup Exec for Windows Server BEWS, specifically the Media Server’s scheduler component. The vulnerability arises from stack-based buffer overflows when long values are written to the properties...

CVE-2007-6017

The PVATLCalendar.PVCalendar.1 ActiveX control (pvcalendar.ocx) in the Media Server component of Symantec Backup Exec for Windows Server (BEWS) 11d/12.0 exposes an unsafe Save method. The vulnerability allows a remote attacker to cause a denial of service (browser crash) or to create/overwrite ar...

CVE-2008-5408

Symantec Backup Exec for Windows Servers is affected by CVE-2008-5408: a buffer overflow in the data management protocol affects multiple builds (11.0 6235/7170; 12.0 1364; 12.5 2213). The vulnerability allows remote authenticated users to cause a denial of service (application crash) and potenti...