Lucene search

K
cve[email protected]CVE-2004-1172
HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1172

2005-01-1005:00:00
web.nvd.nist.gov
43
cve-2004-1172
buffer overflow
veritas
backup exec
security vulnerability
remote code execution

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.95 High

EPSS

Percentile

99.3%

Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname.

Affected configurations

NVD
Node
symantec_veritasbackup_execMatch8.0
OR
symantec_veritasbackup_execMatch8.5
OR
symantec_veritasbackup_execMatch8.6
OR
symantec_veritasbackup_execMatch9.0
OR
symantec_veritasbackup_execMatch9.1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.95 High

EPSS

Percentile

99.3%