7.5

CVE-2005-0773

Exploit

Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument.

Data is provided by the National Vulnerability Database (NVD)
Symantec Veritas ≫ Backup Exec Version9.0.4019
Symantec Veritas ≫ Backup Exec Version9.0.4170
Symantec Veritas ≫ Backup Exec Version9.0.4172
Symantec Veritas ≫ Backup Exec Version9.0.4174
Symantec Veritas ≫ Backup Exec Version9.0.4202
Symantec Veritas ≫ Backup Exec Version9.0_rev.4367
Symantec Veritas ≫ Backup Exec Version9.0_rev.4367_sp1
Symantec Veritas ≫ Backup Exec Version9.0_rev.4454
Symantec Veritas ≫ Backup Exec Version9.0_rev.4454_sp1
Symantec Veritas ≫ Backup Exec Version9.1.306
Symantec Veritas ≫ Backup Exec Version9.1.307
Symantec Veritas ≫ Backup Exec Version9.1.1067.2
Symantec Veritas ≫ Backup Exec Version9.1.1067.3
Symantec Veritas ≫ Backup Exec Version9.1.1127.1
Symantec Veritas ≫ Backup Exec Version9.1.1151.1
Symantec Veritas ≫ Backup Exec Version9.1.1152
Symantec Veritas ≫ Backup Exec Version9.1.1152.4
Symantec Veritas ≫ Backup Exec Version9.1.1154
Symantec Veritas ≫ Backup Exec Version9.1_rev.4691
Symantec Veritas ≫ Backup Exec Version9.1_rev.4691_sp2
Symantec Veritas ≫ Backup Exec Version10.0_rev.5484
Symantec Veritas ≫ Backup Exec Version10.0_rev.5484_sp1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 75.18% 0.988
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
http://www.kb.cert.org/vuls/id/492105
Patch
Third Party Advisory
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-180A.html
Patch
Third Party Advisory
US Government Resource