Lucene search

[email protected]CVE-2005-2611

HistoryAug 17, 2005 - 4:00 a.m.

CVE-2005-2611

2005-08-1704:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-2611

veritas

backup exec

netware

windows servers

netbackup

ndmp

authentication

remote attackers

file access

7.3 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.973 High

EPSS

Percentile

99.9%

JSON

VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server.

CPENameOperatorVersion
symantec_veritas:backup_exec_remote_agentsymantec veritas backup exec remote agenteqnetware_server
symantec_veritas:netbackupsymantec veritas netbackupeqnetware_media_servers_4.5_mp3
symantec_veritas:netbackupsymantec veritas netbackupeqnetware_media_servers_4.5_mp7
symantec_veritas:backup_execsymantec veritas backup execeqnetware_servers_9.0.4019
symantec_veritas:backup_execsymantec veritas backup execeqwindows_servers_9.1_rev._4691
symantec_veritas:netbackupsymantec veritas netbackupeqnetware_media_servers_4.5_mp4
symantec_veritas:netbackupsymantec veritas netbackupeqnetware_media_servers_4.5_fp1
symantec_veritas:netbackupsymantec veritas netbackupeqnetware_media_servers_4.5_mp8
symantec_veritas:backup_exec_remote_agentsymantec veritas backup exec remote agenteqwindows_server
symantec_veritas:netbackupsymantec veritas netbackupeqnetware_media_servers_4.5_fp8

CPE	Name	Operator	Version
symantec_veritas:backup_exec_remote_agent	symantec veritas backup exec remote agent	eq	netware_server
symantec_veritas:netbackup	symantec veritas netbackup	eq	netware_media_servers_4.5_mp3
symantec_veritas:netbackup	symantec veritas netbackup	eq	netware_media_servers_4.5_mp7
symantec_veritas:backup_exec	symantec veritas backup exec	eq	netware_servers_9.0.4019
symantec_veritas:backup_exec	symantec veritas backup exec	eq	windows_servers_9.1_rev._4691
symantec_veritas:netbackup	symantec veritas netbackup	eq	netware_media_servers_4.5_mp4
symantec_veritas:netbackup	symantec veritas netbackup	eq	netware_media_servers_4.5_fp1
symantec_veritas:netbackup	symantec veritas netbackup	eq	netware_media_servers_4.5_mp8
symantec_veritas:backup_exec_remote_agent	symantec veritas backup exec remote agent	eq	windows_server
symantec_veritas:netbackup	symantec veritas netbackup	eq	netware_media_servers_4.5_fp8

Rows per page:

1-10 of 571

References

secunia.com/advisories/16403

securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.html

securitytracker.com/id?1014662

www.kb.cert.org/vuls/id/378957

www.securityfocus.com/bid/14551

www.us-cert.gov/cas/techalerts/TA05-224A.html

www.vupen.com/english/advisories/2005/1387

exchange.xforce.ibmcloud.com/vulnerabilities/21793

7.3 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.973 High

EPSS

Percentile

99.9%

JSON

Related for CVE-2005-2611

cert1 cvelist1 nessus1