CVE Feed

    Dashboard / CVE / CVE-2005-0773

    CVE-2005-0773

    Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument.

    Published:Jun 18, 2005
    Last Modified:Apr 16, 2026
    EPS:Jun 29, 2005
    EPSS Score:0.75181
    CVSS Score:7.5

    Affected Products

    Vendor
    Symantec Veritas
    Product
    Backup Exec

    Exploits

    http://www.securityfocus.com/bid/14022http://www.securityfocus.com/bid/14022https://www.exploit-db.com/exploits/16332

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2006-4128 (CVSS 6.5) — Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windo…
    CVE-2006-1297 (CVSS 5) — Unspecified vulnerability in Veritas Backup Exec for Windows Server Remote Agent 9.1 through 10.1, for Netware…
    CVE-2006-1298 (CVSS 4.6) — Format string vulnerability in the Job Engine service (bengine.exe) in the Media Server in Veritas Backup Exec…
    CVE-2005-2611 (CVSS 10) — VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and Net…
    CVE-2005-2079 (CVSS 7.5) — Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows …
    CVE-2005-2080 (CVSS 7.5) — Unknown vulnerability in Remote Agent for Windows Servers (RAWS) in VERITAS Backup Exec 9.0 through 10.0 for W…
    CVE-2005-2051 (CVSS 7.5) — Buffer overflow in the VERITAS Backup Exec Web Administration Console (BEWAC) 9.0 4367 through 10.0 rev. 5484 …
    CVE-2005-0771 (CVSS 10) — VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers…
    CVE-2004-1172 (CVSS 10) — Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.…
    CVE-2002-1117 (CVSS 5) — Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange …

    References

    http://secunia.com/advisories/15789
    http://securitytracker.com/id?1014273
    http://seer.support.veritas.com/docs/276604.htm
    http://seer.support.veritas.com/docs/277429.htm
    http://www.idefense.com/application/poi/display?id=272&type=vulnerabilities&flashstatus=true
    http://www.kb.cert.org/vuls/id/492105
    http://www.osvdb.org/17624
    http://www.securityfocus.com/bid/14022
    http://www.us-cert.gov/cas/techalerts/TA05-180A.html
    http://secunia.com/advisories/15789
    http://securitytracker.com/id?1014273
    http://seer.support.veritas.com/docs/276604.htm
    http://seer.support.veritas.com/docs/277429.htm
    http://www.idefense.com/application/poi/display?id=272&type=vulnerabilities&flashstatus=true
    http://www.kb.cert.org/vuls/id/492105
    http://www.osvdb.org/17624
    http://www.securityfocus.com/bid/14022
    http://www.us-cert.gov/cas/techalerts/TA05-180A.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High