VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server.
References
Link | Resource |
---|---|
http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.html | Patch Vendor Advisory |
http://www.us-cert.gov/cas/techalerts/TA05-224A.html | Third Party Advisory US Government Resource |
http://www.kb.cert.org/vuls/id/378957 | Patch Third Party Advisory US Government Resource |
http://www.securityfocus.com/bid/14551 | Exploit |
http://securitytracker.com/id?1014662 | Exploit Patch Vendor Advisory |
http://secunia.com/advisories/16403 | Patch Vendor Advisory |
http://www.vupen.com/english/advisories/2005/1387 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/21793 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-08-16 21:00
Updated : 2017-07-10 18:32
NVD link : CVE-2005-2611
Mitre link : CVE-2005-2611
JSON object : View
CWE
Products Affected
symantec_veritas
- netbackup
- backup_exec
- backup_exec_remote_agent