CVE-2005-2611
Critical
Description
VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server.
SeverityCritical
CVSS10.0
Exploit probability—
ProductSymantec Veritas Backup Exec
PublishedAug 17, 2005
First seenAug 17, 2005
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec_veritas backup_exec | netware_servers_9.0.4019, netware_servers_9.0.4170, netware_servers_9.0.4172, netware_servers_9.0.4174, netware_servers_9.0.4202, netware_servers_9.1.306, netware_servers_9.1.307, netware_servers_9.1.1067_.2, netware_servers_9.1.1067_.3, netware_servers_9.1.1127_.1, netware_servers_9.1.1151_.1, netware_servers_9.1.1152, netware_servers_9.1.1152_.4, netware_servers_9.1.1154, netware_servers_9.1.1156, windows_servers_8.6, windows_servers_9.0, windows_servers_9.0_rev._4367, windows_servers_9.0_rev._4367_sp1, windows_servers_9.0_rev._4454, windows_servers_9.0_rev._4454_sp1, windows_servers_9.1, windows_servers_9.1_rev._4691, windows_servers_9.1_rev._4691_sp2, windows_servers_10.0_rev._5484, windows_servers_10.0_rev._5484_sp1, windows_servers_10.0_rev._5520 | — |
| symantec_veritas backup_exec_remote_agent | netware_server, unix_linux_server, windows_server | — |
| symantec_veritas netbackup | netware_media_servers_4.5, netware_media_servers_4.5_fp1, netware_media_servers_4.5_fp2, netware_media_servers_4.5_fp3, netware_media_servers_4.5_fp4, netware_media_servers_4.5_fp5, netware_media_servers_4.5_fp6, netware_media_servers_4.5_fp7, netware_media_servers_4.5_fp8, netware_media_servers_4.5_mp1, netware_media_servers_4.5_mp2, netware_media_servers_4.5_mp3, netware_media_servers_4.5_mp4, netware_media_servers_4.5_mp5, netware_media_servers_4.5_mp6, netware_media_servers_4.5_mp7, netware_media_servers_4.5_mp8, netware_media_servers_5.0, netware_media_servers_5.0_mp1, netware_media_servers_5.0_mp2, netware_media_servers_5.0_mp3, netware_media_servers_5.0_mp4, netware_media_servers_5.0_mp5, netware_media_servers_5.1, netware_media_servers_5.1_mp1, netware_media_servers_5.1_mp2, netware_media_servers_5.1_mp3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.