PT-2005-1802 · Veritas · Veritas Backup Exec Remote Agent

Pedram Amini · Publicado 2005-06-18 · Atualizado 2011-03-08 · CVE-2005-0773

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions VERITAS Backup Exec Remote Agent versions 9.0 through 10.0 for Windows VERITAS Backup Exec Remote Agent versions 9.0.4019 through 9.1.307 for Netware

Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a "CONNECT CLIENT AUTH" request with authentication method type 3 (Windows credentials) and a long password argument.

Recommendations For VERITAS Backup Exec Remote Agent versions 9.0 through 10.0 for Windows, update to a version outside of the affected range to resolve the issue. For VERITAS Backup Exec Remote Agent versions 9.0.4019 through 9.1.307 for Netware, update to a version outside of the affected range to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-0773

Produtos afetados

Veritas Backup Exec Remote Agent

Referências · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/backupexec/remote_agent.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16332 · Exploit
• 🔥 http://securityfocus.com/bid/14022 · Exploit
• http://idefense.com/application/poi/display?id=272&type=vulnerabilities&flashstatus=true · Aviso do Fabricante
• http://kb.cert.org/vuls/id/492105 · Correção
• http://osvdb.org/17624 · Nota
• http://us-cert.gov/cas/techalerts/TA05-180A.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2005-0773 · Nota de Segurança
• http://seer.support.veritas.com/docs/277429.htm · Correção
• http://secunia.com/advisories/15789 · Aviso do Fabricante
• http://seer.support.veritas.com/docs/276604.htm · Aviso do Fabricante
• http://securitytracker.com/id?1014273 · Correção