CVE-2002-1117

Technical details for CVE-2002-1117 are not publicly available in the provided connected documents. The available descriptions reiterate the issue regarding RestrictAnonymous, but no affected products/versions or fixes are specified here. Monitor for updates.

CVE-2004-1172

CVE-2004-1172 affects Veritas Backup Exec Agent Browser (8.x before 8.60.3878 HF68; 9.x before 9.1.4691 HF40). The issue is a stack-based buffer overflow triggered by a registration request containing a long hostname, allowing remote code execution with the service’s privileges. Public advisories...

CVE-2005-0771

CVE-2005-0771 affects VERITAS Backup Exec Server (beserver.exe) on Windows versions 9.0–10.0. It permits unauthenticated remote RPC access on TCP port 6106 that can modify the Windows registry, enabling an attacker to gain full registry control and potentially compromise the host. The vulnerabili...

CVE-2005-2611

CVE-2005-2611 affects VERITAS Backup Exec/NetWare components and NetBackup NetWare Media Server Option, where a static/hard-coded NDMP authentication credential enables remote attackers to read and write arbitrary files on the backup server. Products and versions implicated include VERITAS Backup...

CVE-2006-1297

Affected products/versions: Veritas Backup Exec Remote Agent for Windows Servers (9.1–10.1), NetWare Servers (9.1, 9.2), and Linux Servers (10.0–10.1). Vulnerability type/impact: an unspecified vulnerability leading to a Denial of Service (application crash or unavailability) due to memory errors...

CVE-2005-2080

CVE-2005-2080 affects VERITAS Backup Exec RAWS: vulnerable versions include Backup Exec 9.0–10.0 for Windows and 9.0.4019–9.1.307 for NetWare. The root cause is that remote attackers can gain privileges by copying the server handle. Impact and remediation details are limited to the cited records;...

CVE-2005-0773

The CVE-2005-0773 issue is a stack-based buffer overflow in VERITAS Backup Exec Remote Agent (Windows/NetWare) triggered by a CONNECT_CLIENT_AUTH request with Windows credentials and an excessively long password. Affects Backup Exec 9.x/10.x on Windows (and 9.0.4019–9.1.307 for NetWare). Exploita...

CVE-2005-2079

CVE-2005-2079 describes a heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0–10.0 on Windows Servers. The flaw is capable of enabling remote attackers to execute arbitrary code. The root cause is a heap-based overflow in the Admin Plus Pack Option, leading to pot...

CVE-2005-2051

CVE-2005-2051 describes a buffer overflow in the VERITAS Backup Exec Web Administration Console (BEWAC) affecting versions 9.0 build 4367 up to 10.0 revision 5484, enabling remote attackers to execute arbitrary code. The root cause is a buffer overflow in BEWAC’s web interface. Impact per the pro...

CVE-2006-1298

CVE-2006-1298 is a format string vulnerability in the Job Engine service (bengine.exe) of Veritas Backup Exec Media Server. The flaw affects Backup Exec 10d (10.1) for Windows Servers rev. 5629, Backup Exec 10.0 revs. 5520 and 5484, and Backup Exec 9.1 rev 4691, and is triggered when the job log ...

CVE-2006-4128

The CVE-2006-4128 issue affects Symantec VERITAS Backup Exec products (Backup Exec for Windows Server and Remote Agent, Backup Exec Continuous Protection Server Remote Agent, and related Netware/Remote Agents) with multiple heap-based buffer overflows exposed via crafted RPC messages. The vulnera...