design error...my aunt fanny

sweet mother of moses. if you use backup exec, you need to patch your servers...and i mean now!

seems as tho a hard-coded password exists in several versions of be, stretching back a good 5 years of development. beyond stupid, in the opinion of your friendly neighborhood happyfunboy.

now...we all know symantec just bought veritas. so now i'm wondering if they executed a code-review of veritas' software assets before signing on the dotted line.

if not...why not?
if so...how in the name of all that is holy did they miss that?

and if, in fact, they did review it and did know about it, why would they not have issued anything on this problem until now? why did it take third-party researchers to make it public?