CVE-2021-27876

CVE-2021-27876 affects Veritas Backup Exec (BE) Remote Agent/BE Agent prior to 21.2. The SHA-authentication vulnerability allows an attacker to bypass authentication, issue data-management commands on an authenticated channel, and access arbitrary files on the BE Agent system with SYSTEM/root pri...

CVE-2021-27878

CVE-2021-27878 affects Veritas Backup Exec Remote Agent before 21.2. A flaw in the SHA authentication scheme lets an attacker bypass auth to issue data-management commands and execute arbitrary OS/system commands with high impact on the affected host. The issue is documented across multiple sourc...

CVE-2021-27877

CVE-2021-27877 affects Veritas Backup Exec before 21.2, where SHA authentication remains supported but not disabled. This allows a remote attacker to gain unauthorized access to a Backup Exec Agent and execute privileged commands. The vulnerability excerpt notes the issue is exploitable over the ...

CVE-2017-8895

Summary (CVE-2017-8895) : The vulnerability affects Veritas/Symantec Backup Exec Remote Agent for Windows (NDMP SSL) where a use-after-free during SSL NDMP session handling can lead to remote code execution or denial of service. Affected versions identified in connected docs: 14.1.x before 14.1.1...

CVE-2020-36167

Veritas Backup Exec (versions 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517) loads the OpenSSL library from the Installation folder at startup, which then reads /usr/local/ssl/openssl.cnf. If that file is missing or writable by a low-privilege user on Windows (e.g., C:\usr\local\...

CVE-2024-33673

CVE-2024-33673 affects Veritas Backup Exec before 22.2 HotFix 917391. The issue is improper access controls that enable DLL hijacking in the Windows DLL search path. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required, no user interaction. Impa...

CVE-2005-0772

Affected software/versions: VERITAS Backup Exec 9.0–10.0 for Windows Server and 9.0.4019–9.1.307 for NetWare. Component and cause: Remote Agent NDMLSRVR.DLL; a null pointer dereference triggered by parsing a crafted packet or a request with non-0 Error Status value. Impact: remote denial of servi...

CVE-2024-33671

Summary: CVE-2024-33671 affects Veritas Backup Exec (before 22.2 HotFix 917391). The Backup Exec Deduplication Multi-threaded Streaming Agent can be leveraged to delete arbitrary files on protected files. Impact: highest concerns involve integrity and availability (I/H; A/H per metrics). Root cau...