PT-2005-3022 · Veritas · Remote Agent For Windows Servers+1

Published 2005-06-29 · Updated 2008-09-05 · CVE-2005-2080

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: VERITAS Backup Exec versions 9.0 through 10.0 for Windows VERITAS Backup Exec versions 9.0.4019 through 9.1.307 for NetWare

Description: The issue allows remote attackers to gain privileges by copying the handle for the server. This is related to an unknown vulnerability in the Remote Agent for Windows Servers (RAWS) component.

Recommendations: For VERITAS Backup Exec versions 9.0 through 10.0 for Windows, consider restricting access to the Remote Agent for Windows Servers until a fix is available. For VERITAS Backup Exec versions 9.0.4019 through 9.1.307 for NetWare, restrict access to the Remote Agent for Windows Servers until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-2080

Affected Products

Remote Agent For Windows Servers

Veritas Backup Exec

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-2080 · Security Note
• http://secunia.com/advisories/15789 · Vendor Advisory
• http://seer.support.veritas.com/docs/277429.htm · Patch
• http://seer.support.veritas.com/docs/276608.htm · Vendor Advisory
• http://securityfocus.com/bid/14026 · Note