PT-2005-1800 · Veritas · Veritas Backup Exec Server

Pedram Amini · Published 2005-06-23 · Updated 2011-03-08 · CVE-2005-0771

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VERITAS Backup Exec Server versions 9.0 through 10.0

Description The issue allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106.

Recommendations For versions 9.0 through 10.0, consider restricting access to the RPC interface on TCP port 6106 to prevent unauthorized modifications to the registry.

Exploit

Fix

Related Identifiers

CVE-2005-0771

Affected Products

Veritas Backup Exec Server

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/backupexec/registry.rb · Exploit
• http://seer.support.veritas.com/docs/276605.htm · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA05-180A.html · Patch
• http://seer.support.veritas.com/docs/277429.htm · Patch
• http://kb.cert.org/vuls/id/584505 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-0771 · Security Note
• http://secunia.com/advisories/15789 · Vendor Advisory
• http://securitytracker.com/id?1014273 · Patch
• http://idefense.com/application/poi/display?id=269&type=vulnerabilities&flashstatus=true · Note