CVE-2011-0546 Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle attackers to execute....
MediumCVSS 6.5
EPSS 1.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle attackers to execute NDMP commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec backup exec | = 11.0 | No fix listed |
| symantec backup exec | = 12.0 | No fix listed |
| symantec backup exec | = 12.5 | No fix listed |
| symantec backup exec | = 13.0 | No fix listed |
| symantec backup exec | = 13.0-r2 | No fix listed |
References
- HPSBUX02700 vendor-advisory
- 44698 third-party-advisory vendor-advisory
- 8300 third-party-advisory
- 47824 vdb-entry
- www.symantec.com