CVEvulnerability
CVE-2005-2611
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-08-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server.
Affected configurations
• symantec veritas backup exec netware servers 9.0.4019
• symantec veritas backup exec netware servers 9.0.4170
• symantec veritas backup exec netware servers 9.0.4172
• symantec veritas backup exec netware servers 9.0.4174
• symantec veritas backup exec netware servers 9.0.4202
• symantec veritas backup exec netware servers 9.1.306
• symantec veritas backup exec netware servers 9.1.307
• symantec veritas backup exec netware servers 9.1.1067 .2
• symantec veritas backup exec netware servers 9.1.1067 .3
• symantec veritas backup exec netware servers 9.1.1127 .1
• symantec veritas backup exec netware servers 9.1.1151 .1
• symantec veritas backup exec netware servers 9.1.1152
• symantec veritas backup exec netware servers 9.1.1152 .4
• symantec veritas backup exec netware servers 9.1.1154
• symantec veritas backup exec netware servers 9.1.1156
• symantec veritas backup exec windows servers 8.6
• symantec veritas backup exec windows servers 9.0
• symantec veritas backup exec windows servers 9.0 rev. 4367
• symantec veritas backup exec windows servers 9.0 rev. 4367 sp1
• symantec veritas backup exec windows servers 9.0 rev. 4454
• symantec veritas backup exec windows servers 9.0 rev. 4454 sp1
• symantec veritas backup exec windows servers 9.1
• symantec veritas backup exec windows servers 9.1 rev. 4691
• symantec veritas backup exec windows servers 9.1 rev. 4691 sp2
• symantec veritas backup exec windows servers 10.0 rev. 5484
• symantec veritas backup exec windows servers 10.0 rev. 5484 sp1
• symantec veritas backup exec windows servers 10.0 rev. 5520
• symantec veritas backup exec remote agent netware server
• symantec veritas backup exec remote agent unix linux server
• symantec veritas backup exec remote agent windows server
• symantec veritas netbackup netware media servers 4.5
• symantec veritas netbackup netware media servers 4.5 fp1
• symantec veritas netbackup netware media servers 4.5 fp2
• symantec veritas netbackup netware media servers 4.5 fp3
• symantec veritas netbackup netware media servers 4.5 fp4
• symantec veritas netbackup netware media servers 4.5 fp5
• symantec veritas netbackup netware media servers 4.5 fp6
• symantec veritas netbackup netware media servers 4.5 fp7
• symantec veritas netbackup netware media servers 4.5 fp8
• symantec veritas netbackup netware media servers 4.5 mp1
• symantec veritas netbackup netware media servers 4.5 mp2
• symantec veritas netbackup netware media servers 4.5 mp3
• symantec veritas netbackup netware media servers 4.5 mp4
• symantec veritas netbackup netware media servers 4.5 mp5
• symantec veritas netbackup netware media servers 4.5 mp6
• symantec veritas netbackup netware media servers 4.5 mp7
• symantec veritas netbackup netware media servers 4.5 mp8
• symantec veritas netbackup netware media servers 5.0
• symantec veritas netbackup netware media servers 5.0 mp1
• symantec veritas netbackup netware media servers 5.0 mp2
• symantec veritas netbackup netware media servers 5.0 mp3
• symantec veritas netbackup netware media servers 5.0 mp4
• symantec veritas netbackup netware media servers 5.0 mp5
• symantec veritas netbackup netware media servers 5.1
• symantec veritas netbackup netware media servers 5.1 mp1
• symantec veritas netbackup netware media servers 5.1 mp2
• symantec veritas netbackup netware media servers 5.1 mp3
References
- http://secunia.com/advisories/16403 Patch, Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.html Patch, Vendor Advisory
- http://securitytracker.com/id?1014662 Exploit, Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/378957 Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/14551 Exploit
- http://www.us-cert.gov/cas/techalerts/TA05-224A.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2005/1387 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21793 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/16403 Patch, Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.html Patch, Vendor Advisory
- http://securitytracker.com/id?1014662 Exploit, Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/378957 Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/14551 Exploit
- http://www.us-cert.gov/cas/techalerts/TA05-224A.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2005/1387 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21793 exchange.xforce.ibmcloud.com