PT-2005-3022 · Veritas · Remote Agent For Windows Servers+1

Publicado 2005-06-29 · Atualizado 2008-09-05 · CVE-2005-2080

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: VERITAS Backup Exec versions 9.0 through 10.0 for Windows VERITAS Backup Exec versions 9.0.4019 through 9.1.307 for NetWare

Description: The issue allows remote attackers to gain privileges by copying the handle for the server. This is related to an unknown vulnerability in the Remote Agent for Windows Servers (RAWS) component.

Recommendations: For VERITAS Backup Exec versions 9.0 through 10.0 for Windows, consider restricting access to the Remote Agent for Windows Servers until a fix is available. For VERITAS Backup Exec versions 9.0.4019 through 9.1.307 for NetWare, restrict access to the Remote Agent for Windows Servers until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-2080

Produtos afetados

Remote Agent For Windows Servers

Veritas Backup Exec

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-2080 · Nota de Segurança
• http://secunia.com/advisories/15789 · Aviso do Fabricante
• http://seer.support.veritas.com/docs/277429.htm · Correção
• http://securityfocus.com/bid/14026 · Nota
• http://seer.support.veritas.com/docs/276608.htm · Aviso do Fabricante