7.5

CVE-2005-0773

Exploit
Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Symantec Veritas ≫ Backup Exec Version 9.0.4019
Symantec Veritas ≫ Backup Exec Version 9.0.4170
Symantec Veritas ≫ Backup Exec Version 9.0.4172
Symantec Veritas ≫ Backup Exec Version 9.0.4174
Symantec Veritas ≫ Backup Exec Version 9.0.4202
Symantec Veritas ≫ Backup Exec Version 9.0_rev.4367
Symantec Veritas ≫ Backup Exec Version 9.0_rev.4367_sp1
Symantec Veritas ≫ Backup Exec Version 9.0_rev.4454
Symantec Veritas ≫ Backup Exec Version 9.0_rev.4454_sp1
Symantec Veritas ≫ Backup Exec Version 9.1.306
Symantec Veritas ≫ Backup Exec Version 9.1.307
Symantec Veritas ≫ Backup Exec Version 9.1.1067.2
Symantec Veritas ≫ Backup Exec Version 9.1.1067.3
Symantec Veritas ≫ Backup Exec Version 9.1.1127.1
Symantec Veritas ≫ Backup Exec Version 9.1.1151.1
Symantec Veritas ≫ Backup Exec Version 9.1.1152
Symantec Veritas ≫ Backup Exec Version 9.1.1152.4
Symantec Veritas ≫ Backup Exec Version 9.1.1154
Symantec Veritas ≫ Backup Exec Version 9.1_rev.4691
Symantec Veritas ≫ Backup Exec Version 9.1_rev.4691_sp2
Symantec Veritas ≫ Backup Exec Version 10.0_rev.5484
Symantec Veritas ≫ Backup Exec Version 10.0_rev.5484_sp1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 86.37% 0.997
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/15789
Patch
Vendor Advisory
http://securitytracker.com/id?1014273
Patch
http://seer.support.veritas.com/docs/276604.htm
Patch
Vendor Advisory
http://seer.support.veritas.com/docs/277429.htm
Patch
http://www.idefense.com/application/poi/display?id=272&type=vulnerabilities&flashstatus=true
Vendor Advisory
http://www.kb.cert.org/vuls/id/492105
Patch
Third Party Advisory
US Government Resource
http://www.osvdb.org/17624
http://www.securityfocus.com/bid/14022
Patch
Exploit
http://www.us-cert.gov/cas/techalerts/TA05-180A.html
Patch
Third Party Advisory
US Government Resource