Symantec Backup Exec 12.5 MiTM Attack

🗓️ 10 Jul 2011 00:00:00Reported by RootType

Symantec Backup Exec 12.5 MiTM Attack disclosure and exploi

Reporter	Title	Published	Views	Family All 24
Circl	CVE-2011-0546	9 Jul 201100:00	–	circl
CVE	CVE-2011-0546	31 May 201120:00	–	cve
Cvelist	CVE-2011-0546	31 May 201120:00	–	cvelist
Exploit DB	Symantec Backup Exec 12.5 - Man In The Middle	9 Jul 201100:00	–	exploitdb
EUVD	EUVD-2011-0564	7 Oct 202500:30	–	euvd
exploitpack	Symantec Backup Exec 12.5 - Man In The Middle	9 Jul 201100:00	–	exploitpack
Tenable Nessus	HP-UX PHCO_42173 : HP-UX running VEA, Remote Denial of Service (DoS), Execution of Arbitrary Code (HPSBUX02700 SSRT100506 rev.2)	6 Mar 201200:00	–	nessus
Tenable Nessus	HP-UX PHCO_42175 : HP-UX running VEA, Remote Denial of Service (DoS), Execution of Arbitrary Code (HPSBUX02700 SSRT100506 rev.2)	6 Mar 201200:00	–	nessus
Tenable Nessus	HP-UX PHCO_42176 : HP-UX running VEA, Remote Denial of Service (DoS), Execution of Arbitrary Code (HPSBUX02700 SSRT100506 rev.2)	6 Mar 201200:00	–	nessus
Tenable Nessus	HP-UX PHCO_42177 : HP-UX running VEA, Remote Denial of Service (DoS), Execution of Arbitrary Code (HPSBUX02700 SSRT100506 rev.2)	6 Mar 201200:00	–	nessus


                                                Exploit Title: Symantec Backup Exec MiTM Attack
Date: 27/05/2011
Author: Nibin
Software Link: http://www.symantec.com/business/products/family.jsp?familyid=backupexec
Version:
 - Symantec Backup Exec for Windows Servers versions 11.0, 12.0, and 12.5
 - Symantec Backup Exec 2010 versions 13.0 and 13.0 R2
Tested on: Tested on Symantec Backup Exec 12.5 for Windows Servers
CVE : CVE-2011-0546
BID: 47824
 
Symantec Disclosure link:
http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2011&amp;suid=20110526_00
iViZ Disclosure link: goo.gl/1vzdE
 
Exploit Code: http://www.exploit-db.com/sploits/SymantecReplay.zip

10 Jul 2011 00:00Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.00479