CVE-2005-0773 Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_C...
HighCVSS 7.5
EPSS 86.4%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec veritas backup exec | = 9.0.4019 | No fix listed |
| symantec veritas backup exec | = 9.0.4170 | No fix listed |
| symantec veritas backup exec | = 9.0.4172 | No fix listed |
| symantec veritas backup exec | = 9.0.4174 | No fix listed |
| symantec veritas backup exec | = 9.0.4202 | No fix listed |
| symantec veritas backup exec | = 9.0_rev.4367 | No fix listed |
| symantec veritas backup exec | = 9.0_rev.4367_sp1 | No fix listed |
| symantec veritas backup exec | = 9.0_rev.4454 | No fix listed |
| symantec veritas backup exec | = 9.0_rev.4454_sp1 | No fix listed |
| symantec veritas backup exec | = 9.1.306 | No fix listed |
| symantec veritas backup exec | = 9.1.307 | No fix listed |
| symantec veritas backup exec | = 9.1.1067.2 | No fix listed |
| symantec veritas backup exec | = 9.1.1067.3 | No fix listed |
| symantec veritas backup exec | = 9.1.1127.1 | No fix listed |
| symantec veritas backup exec | = 9.1.1151.1 | No fix listed |
| symantec veritas backup exec | = 9.1.1152 | No fix listed |
| symantec veritas backup exec | = 9.1.1152.4 | No fix listed |
| symantec veritas backup exec | = 9.1.1154 | No fix listed |
| symantec veritas backup exec | = 9.1_rev.4691 | No fix listed |
| symantec veritas backup exec | = 9.1_rev.4691_sp2 | No fix listed |
| symantec veritas backup exec | = 10.0_rev.5484 | No fix listed |
| symantec veritas backup exec | = 10.0_rev.5484_sp1 | No fix listed |
References
- 15789 patch third-party-advisory vendor-advisory
- 1014273 patch vdb-entry
- seer.support.veritas.com patch vendor-advisory
- seer.support.veritas.com patch
- 20050623 Veritas Backup Exec Agent CONNECT_CLIENT_AUTH Buffer Overflow Vulnerability third-party-advisory vendor-advisory
- VU#492105 patch third-party-advisory us-government-resource
- 17624 vdb-entry
- 14022 exploit patch vdb-entry
- TA05-180A patch third-party-advisory us-government-resource