CVE-2005-2611
high · 10VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server.
10
CVSS
87.0%
EPSS (exploit prob.)
100th
EPSS percentile
2005-08-17
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| symantec_veritas | backup_exec | netware_servers_9.0.4019 |
| symantec_veritas | backup_exec | netware_servers_9.0.4170 |
| symantec_veritas | backup_exec | netware_servers_9.0.4172 |
| symantec_veritas | backup_exec | netware_servers_9.0.4174 |
| symantec_veritas | backup_exec | netware_servers_9.0.4202 |
| symantec_veritas | backup_exec | netware_servers_9.1.306 |
| symantec_veritas | backup_exec | netware_servers_9.1.307 |
| symantec_veritas | backup_exec | netware_servers_9.1.1067_.2 |
| symantec_veritas | backup_exec | netware_servers_9.1.1067_.3 |
| symantec_veritas | backup_exec | netware_servers_9.1.1127_.1 |
| symantec_veritas | backup_exec | netware_servers_9.1.1151_.1 |
| symantec_veritas | backup_exec | netware_servers_9.1.1152 |
| symantec_veritas | backup_exec | netware_servers_9.1.1152_.4 |
| symantec_veritas | backup_exec | netware_servers_9.1.1154 |
| symantec_veritas | backup_exec | netware_servers_9.1.1156 |
| symantec_veritas | backup_exec | windows_servers_8.6 |
| symantec_veritas | backup_exec | windows_servers_9.0 |
| symantec_veritas | backup_exec | windows_servers_9.0_rev._4367 |
| symantec_veritas | backup_exec | windows_servers_9.0_rev._4367_sp1 |
| symantec_veritas | backup_exec | windows_servers_9.0_rev._4454 |
| symantec_veritas | backup_exec | windows_servers_9.0_rev._4454_sp1 |
| symantec_veritas | backup_exec | windows_servers_9.1 |
| symantec_veritas | backup_exec | windows_servers_9.1_rev._4691 |
| symantec_veritas | backup_exec | windows_servers_9.1_rev._4691_sp2 |
| symantec_veritas | backup_exec | windows_servers_10.0_rev._5484 |
| symantec_veritas | backup_exec | windows_servers_10.0_rev._5484_sp1 |
| symantec_veritas | backup_exec | windows_servers_10.0_rev._5520 |
| symantec_veritas | backup_exec_remote_agent | netware_server |
| symantec_veritas | backup_exec_remote_agent | unix_linux_server |
| symantec_veritas | backup_exec_remote_agent | windows_server |
| symantec_veritas | netbackup | netware_media_servers_4.5 |
| symantec_veritas | netbackup | netware_media_servers_4.5_fp1 |
| symantec_veritas | netbackup | netware_media_servers_4.5_fp2 |
| symantec_veritas | netbackup | netware_media_servers_4.5_fp3 |
| symantec_veritas | netbackup | netware_media_servers_4.5_fp4 |
| symantec_veritas | netbackup | netware_media_servers_4.5_fp5 |
| symantec_veritas | netbackup | netware_media_servers_4.5_fp6 |
| symantec_veritas | netbackup | netware_media_servers_4.5_fp7 |
| symantec_veritas | netbackup | netware_media_servers_4.5_fp8 |
| symantec_veritas | netbackup | netware_media_servers_4.5_mp1 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/16403
- http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.html
- http://securitytracker.com/id?1014662
- http://www.kb.cert.org/vuls/id/378957
- http://www.securityfocus.com/bid/14551
- http://www.us-cert.gov/cas/techalerts/TA05-224A.html
- http://www.vupen.com/english/advisories/2005/1387
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21793
- http://secunia.com/advisories/16403
- http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.html
- http://securitytracker.com/id?1014662
- http://www.kb.cert.org/vuls/id/378957
- http://www.securityfocus.com/bid/14551
- http://www.us-cert.gov/cas/techalerts/TA05-224A.html
- http://www.vupen.com/english/advisories/2005/1387
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21793
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2005-2611