CVE Feed

    Dashboard / CVE / CVE-2005-2611

    CVE-2005-2611

    VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server.

    Published:Aug 17, 2005
    Last Modified:Apr 16, 2026
    EPS:Aug 17, 2005
    EPSS Score:0.79629
    CVSS Score:10

    Affected Products

    Vendor
    Symantec Veritas
    Product
    Backup Exec
    Vendor
    Symantec Veritas
    Product
    Backup Exec Remote Agent
    Vendor
    Symantec Veritas
    Product
    Netbackup

    Exploits

    http://securitytracker.com/id?1014662http://www.securityfocus.com/bid/14551http://securitytracker.com/id?1014662http://www.securityfocus.com/bid/14551https://www.exploit-db.com/exploits/1147

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2006-4128 (CVSS 6.5) — Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windo…
    CVE-2006-1297 (CVSS 5) — Unspecified vulnerability in Veritas Backup Exec for Windows Server Remote Agent 9.1 through 10.1, for Netware…
    CVE-2006-1298 (CVSS 4.6) — Format string vulnerability in the Job Engine service (bengine.exe) in the Media Server in Veritas Backup Exec…
    CVE-2005-2079 (CVSS 7.5) — Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows …
    CVE-2005-2080 (CVSS 7.5) — Unknown vulnerability in Remote Agent for Windows Servers (RAWS) in VERITAS Backup Exec 9.0 through 10.0 for W…
    CVE-2005-2051 (CVSS 7.5) — Buffer overflow in the VERITAS Backup Exec Web Administration Console (BEWAC) 9.0 4367 through 10.0 rev. 5484 …
    CVE-2005-0771 (CVSS 10) — VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers…
    CVE-2005-0773 (CVSS 7.5) — Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 thr…
    CVE-2004-1172 (CVSS 10) — Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.…
    CVE-2002-1117 (CVSS 5) — Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High