This script is Copyright (C) 2005-2016 Tenable Network Security, Inc.
The remote host is affected by a remote code execution vulnerability.
The version of Veritas Backup Exec Agent Browser installed on the
remote host is 8.x prior to 8.60.3878 hotfix 68, 9.0.x prior to
9.0.4454 hotfix 30, or 9.1.x prior to 9.1.4691 hotfix 40. It is,
therefore, affected by a remote code execution vulnerability in the
registration service (benetns.exe) due to a failure to validate the
client hostname field during the registration process. An
unauthenticated, remote attacker can exploit this, via a specially
crafted request, to cause a stack-based buffer overflow, resulting in
the execution of arbitrary code.
See also :
Upgrade to Veritas Backup Exec Agent Browser 8.60.3878 hotfix 68 /
9.0.4454 hotfix 30 / 9.1.4691 hotfix 40 or later.
Risk factor :
Critical / CVSS Base Score : 10.0
CVSS Temporal Score : 8.3
Public Exploit Available : true