CVEvulnerability

CVE-2011-0546

6.5 MEDIUM Published 2011-05-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-05-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:A/AC:H/Au:S/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle attackers to execute NDMP commands via unspecified vectors.

Affected configurations

• symantec backup exec 11.0 • symantec backup exec 12.0 • symantec backup exec 12.5 • symantec backup exec 13.0

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References