PT-2005-1802 · Veritas · Veritas Backup Exec Remote Agent

Pedram Amini · Published 2005-06-18 · Updated 2011-03-08 · CVE-2005-0773

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions VERITAS Backup Exec Remote Agent versions 9.0 through 10.0 for Windows VERITAS Backup Exec Remote Agent versions 9.0.4019 through 9.1.307 for Netware

Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a "CONNECT CLIENT AUTH" request with authentication method type 3 (Windows credentials) and a long password argument.

Recommendations For VERITAS Backup Exec Remote Agent versions 9.0 through 10.0 for Windows, update to a version outside of the affected range to resolve the issue. For VERITAS Backup Exec Remote Agent versions 9.0.4019 through 9.1.307 for Netware, update to a version outside of the affected range to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2005-0773

Affected Products

Veritas Backup Exec Remote Agent

References · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/backupexec/remote_agent.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16332 · Exploit
• 🔥 http://securityfocus.com/bid/14022 · Exploit
• http://idefense.com/application/poi/display?id=272&type=vulnerabilities&flashstatus=true · Vendor Advisory
• http://kb.cert.org/vuls/id/492105 · Patch
• http://us-cert.gov/cas/techalerts/TA05-180A.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-0773 · Security Note
• http://seer.support.veritas.com/docs/277429.htm · Patch
• http://secunia.com/advisories/15789 · Vendor Advisory
• http://seer.support.veritas.com/docs/276604.htm · Vendor Advisory
• http://securitytracker.com/id?1014273 · Patch
• http://osvdb.org/17624 · Note