CVE-2004-1172: Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and...

Security readout for executives and security teams

This is a remote code execution risk in older Veritas Backup Exec Agent Browser components. A specially crafted registration request with an overly long hostname can overflow stack memory. For executives, the main concern is compromise of backup infrastructure, which often has broad access and operational importance. Exposure is likely limited to legacy Veritas Backup Exec 8.x and 9.x deployments running the Agent Browser service below the listed hotfix levels. Internet exposure would increase urgency, but the source bundle does not describe default network exposure or affected ports. Prioritize remediation if any affected Backup Exec 8.x or 9.x systems remain in production. Backup platforms can be high-value targets because they often access sensitive data and recovery paths. If the product is no longer supportable, replacement should be treated as a risk-reduction project. Mitigation focus: Upgrade Backup Exec 8.x to at least 8.60.3878 Hotfix 68.; Upgrade Backup Exec 9.x to at least 9.1.4691 Hotfix 40.; Check current Veritas or successor vendor guidance for archived patch availability..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.