Page 2 of 14 results (0.003 seconds)

CVSS: 7.5EPSS: 11%CPEs: 2EXPL: 0

26 Jun 2005 — VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL or (2) a request packet with an invalid (non-0) "Error Status" value, which triggers a null dereference. • http://secunia.com/advisories/15789 • CWE-476: NULL Pointer Dereference •

CVSS: 10.0EPSS: 81%CPEs: 4EXPL: 1

23 Jun 2005 — VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106. • https://packetstorm.news/files/id/180900 •

CVSS: 9.8EPSS: 75%CPEs: 22EXPL: 2

18 Jun 2005 — Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument. • https://www.exploit-db.com/exploits/16332 •

CVSS: 10.0EPSS: 79%CPEs: 5EXPL: 2

22 Dec 2004 — Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname. • https://www.exploit-db.com/exploits/750 •