August 15, 2005, 3:55 PM — Symantec Corp. has released software that fixes critical vulnerabilities in the company's Veritas Backup Exec and Veritas NetBackup software.
The patches were published on Saturday, a day after the company first warned of the problem. A flaw in the Network Data Management Protocol agent, used by the Veritas backup software, could allow an attacker to gain access to the system and download files, according to a Symantec statement released Monday.
The Metasploit penetration testing tool kit already takes advantage of this vulnerability, and there are reports that exploits for the flaw are already being used by attackers, Symantec said.
The bug affects a wider range of software than Symantec first reported last week, including NetWare versions of the NetBackup software, a company spokesman said Monday.
Details on the vulnerability and links to the software patches can be found here: http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.html