high7.5Public exploit code
CVE-2005-0773
Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Veritas Backup Exec Windows - Remote Agent Overflow (Metasploit)2010-07-03 · remote · windows · Verified
Impact
Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec Veritas | Backup Exec | Versions 9.0.4019, 9.0.4170, 9.0.4172, 9.0.4174, 9.0.4202, 9.0_rev.4367 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/15789
- http://securitytracker.com/id?1014273
- http://seer.support.veritas.com/docs/276604.htm
- http://seer.support.veritas.com/docs/277429.htm
- http://www.idefense.com/application/poi/display?id=272&type=vulnerabilities&flashstatus=true
- http://www.kb.cert.org/vuls/id/492105
- http://www.osvdb.org/17624
- http://www.securityfocus.com/bid/14022
- http://www.us-cert.gov/cas/techalerts/TA05-180A.html
- http://secunia.com/advisories/15789
- http://securitytracker.com/id?1014273
- http://seer.support.veritas.com/docs/276604.htm
- http://seer.support.veritas.com/docs/277429.htm
- http://www.idefense.com/application/poi/display?id=272&type=vulnerabilities&flashstatus=true
- http://www.kb.cert.org/vuls/id/492105
- http://www.osvdb.org/17624
- http://www.securityfocus.com/bid/14022
- http://www.us-cert.gov/cas/techalerts/TA05-180A.html