IDG News Service - EMC Corp. has issued patches for security problems with its data backup software, while exploit code has been released targeting a flaw in backup software from Veritas Software Corp. that the company patched last year.
EMC has issued patches for three versions of its NetWorker backup software to fix problems that could lead to a system crash or unauthorized remote access. EMC issued a hot fix for NetWorker 7.2.1, while the 7.1.4 and 7.3 versions of the software have already incorporated the necessary changes, according to a company posting.
No security incidents have been reported, EMC said.
However, exploit code has been released targeting a vulnerability in Veritas' NetBackup product. The French Security Incident Response Team, a computer security watchdog, posted the code Monday on its Web site.
The flaw was first discovered in November by iDefense Inc., and a patch was subsequently issued by Symantec Corp., which owns Veritas.
Symantec said a buffer-overflow capability exists in a shared library used by the NetBackup volume manager daemon, affecting 5.x versions of servers and clients. If successful, an exploit could allow a hacker to deny service or execute arbitrary code.
Free Insider GuideCopyright © 1994 - 2012 Computerworld Inc. All rights reserved. Reproduction in whole or in part in any form or medium without express written permission of Computerworld Inc. is prohibited. Computerworld and Computerworld.com and the respective logos are trademarks of International Data Group Inc.
