Description
Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to cause a denial of service (CPU and memory consumption) via a crafted packet to port 5633/tcp, which triggers an infinite loop.
References
- backupexec-bengine-dos(38677) vdb-entry
- 26975 third-party-advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2007.11.27.html
- 20071128 Secunia Research: Symantec Backup Exec Job Engine Denial of Service mailing-list
- http://secunia.com/secunia_research/2007-74/advisory/
- 26029 vdb-entry
- 20071128 SYM07-029 Symantec BEWS Multiple DoS in Job Engine mailing-list
- ADV-2007-4019 vdb-entry
- 1019001 vdb-entry