Added: 12/22/2005
CVE: CVE-2005-0773
BID: 14022
OSVDB: 17624
VERITAS Backup Exec is a network backup solution for Windows and Netware servers.
VERITAS Backup Exec is affected by a buffer overflow when handling **CONNECT_CLIENT_AUTH**
requests with the Windows user authentication type. A very long password could overflow the buffer, leading to command execution.
VERITAS Security Advisory VX05-002.
[http://www.idefense.com/intelligence/vulnerabilities/display.php?id=272&type=vulnerabilities ](<http://www.idefense.com/intelligence/vulnerabilities/display.php?id=272&type=vulnerabilities
>)
Exploit works on Backup Exec 9.1 on Windows platforms.
Windows 2000
Windows XP / Windows Server 2003