TCP Port 6101

Common Use

SynchroNet-rtc, Veritas Agent Browser for Backup Exec.

Inbound Scan

Currently inbound scans are likely to exploit attempts again a buffer overflow vulnerability within the Agent Browser in Veritas Backup Exec.  Some viruses and worms are currently using this exploit, usually in combination with other exploit attempts on ports 445 and 135.

Outbound Scan

Outbound scans if occurring in volume should be considered an indication of a possible worm infection on the source computer and should be investigated.

Additional Information

PortPeeker Capture of Exploit attempt

Veritas support note for the vulnerability

Page last updated on April 02, 2005