CVE Feed

    Dashboard / CVE / CVE-2004-1172

    CVE-2004-1172

    Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname.

    Published:Dec 22, 2004
    Last Modified:Apr 16, 2026
    EPS:Dec 22, 2004
    EPSS Score:0.82222
    CVSS Score:10

    Affected Products

    Vendor
    Symantec Veritas
    Product
    Backup Exec

    Exploits

    https://www.exploit-db.com/exploits/750https://www.exploit-db.com/exploits/16331

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2006-4128 (CVSS 6.5) — Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windo…
    CVE-2006-1297 (CVSS 5) — Unspecified vulnerability in Veritas Backup Exec for Windows Server Remote Agent 9.1 through 10.1, for Netware…
    CVE-2006-1298 (CVSS 4.6) — Format string vulnerability in the Job Engine service (bengine.exe) in the Media Server in Veritas Backup Exec…
    CVE-2005-2611 (CVSS 10) — VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and Net…
    CVE-2005-2079 (CVSS 7.5) — Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows …
    CVE-2005-2080 (CVSS 7.5) — Unknown vulnerability in Remote Agent for Windows Servers (RAWS) in VERITAS Backup Exec 9.0 through 10.0 for W…
    CVE-2005-2051 (CVSS 7.5) — Buffer overflow in the VERITAS Backup Exec Web Administration Console (BEWAC) 9.0 4367 through 10.0 rev. 5484 …
    CVE-2005-0771 (CVSS 10) — VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers…
    CVE-2005-0773 (CVSS 7.5) — Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 thr…
    CVE-2002-1117 (CVSS 5) — Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange …

    References

    http://secunia.com/advisories/13495/
    http://seer.support.veritas.com/docs/273419.htm
    http://seer.support.veritas.com/docs/273420.htm
    http://seer.support.veritas.com/docs/273422.htm
    http://seer.support.veritas.com/docs/273850.htm
    http://www.frsirt.com/exploits/20050111.101_BXEC.cpp.php
    http://www.idefense.com/application/poi/display?id=169
    http://www.kb.cert.org/vuls/id/907729
    http://www.securityfocus.com/bid/11974
    https://exchange.xforce.ibmcloud.com/vulnerabilities/18506
    http://secunia.com/advisories/13495/
    http://seer.support.veritas.com/docs/273419.htm
    http://seer.support.veritas.com/docs/273420.htm
    http://seer.support.veritas.com/docs/273422.htm
    http://seer.support.veritas.com/docs/273850.htm
    http://www.frsirt.com/exploits/20050111.101_BXEC.cpp.php
    http://www.idefense.com/application/poi/display?id=169
    http://www.kb.cert.org/vuls/id/907729
    http://www.securityfocus.com/bid/11974
    https://exchange.xforce.ibmcloud.com/vulnerabilities/18506

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High