CVE-2013-4678

2013-08-0513:22:52

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

2.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.8

Confidence

Low

EPSS

0.001

Percentile

45.6%

JSON

The NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote authenticated users to obtain sensitive host-version information via unspecified vectors.

Affected configurations

Nvd

Node

symantecbackup_execMatch2010

symantecbackup_execMatch2010_r3sp1

symantecbackup_execMatch2010_r3sp2

symantecbackup_execMatch2012

symantecbackup_execMatch2012sp1

VendorProductVersionCPE
symantecbackup_exec2010cpe:2.3:a:symantec:backup_exec:2010:*:*:*:*:*:*:*
symantecbackup_exec2010_r3cpe:2.3:a:symantec:backup_exec:2010_r3:sp1:*:*:*:*:*:*
symantecbackup_exec2010_r3cpe:2.3:a:symantec:backup_exec:2010_r3:sp2:*:*:*:*:*:*
symantecbackup_exec2012cpe:2.3:a:symantec:backup_exec:2012:*:*:*:*:*:*:*
symantecbackup_exec2012cpe:2.3:a:symantec:backup_exec:2012:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	backup_exec	2010	cpe:2.3:a:symantec:backup_exec:2010:::::::*
symantec	backup_exec	2010_r3	cpe:2.3:a:symantec:backup_exec:2010_r3:sp1::::::
symantec	backup_exec	2010_r3	cpe:2.3:a:symantec:backup_exec:2010_r3:sp2::::::
symantec	backup_exec	2012	cpe:2.3:a:symantec:backup_exec:2012:::::::*
symantec	backup_exec	2012	cpe:2.3:a:symantec:backup_exec:2012:sp1::::::