CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 1CVE-2011-0546 – Symantec Backup Exec 12.5 - Man In The Middle
https://notcve.org/view.php?id=CVE-2011-0546
Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle attackers to execute NDMP commands via unspecified vectors. Symantec Backup Exec v11.0, v12.0, v12.5, v13.0 y v13.0R2 no valida la información de identidad enviada entre el servidor media y el agente remoto, que permite a los atacantes de hombre-en-medio (man in the middle) para ejecutar comandos NDMP a través de de vectores no especificados. • https://www.exploit-db.com/exploits/17517 http://marc.info/?l=bugtraq&m=131489365508507&w=2 http://secunia.com/advisories/44698 http://securityreason.com/securityalert/8300 http://www.securityfocus.com/bid/47824 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110526_00 • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 7%CPEs: 13EXPL: 0CVE-2006-4128
https://notcve.org/view.php?id=CVE-2006-4128
Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message. Múliples desbordamientos de búfer en Symantec VERITAS Backup Exec para Netware Server Remote Agent para Windows Server 9.1 y 9.2 (todas las construcciones), Backup Exec Continuous Protection Server Remote Agent para Windows Server 10.1 (10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, y 10.1.327.401), y Backup Exec para Windows Server y Remote Agent 9.1 (9.1.4691), 10.0 (10.0.5484 y 10.0.5520), y 10.1 (10.1.5629) permite a un atacante remoto provocar denegación de servicio (caida de aplicación) y posiblemente ejecutar código de su elección a través de mensajes RPC manipulados. • http://secunia.com/advisories/21472 http://securityreason.com/securityalert/1380 http://securityresponse.symantec.com/avcenter/security/Content/2006.08.11.html http://securitytracker.com/id?1016683 http://seer.entsupport.symantec.com/docs/284623.htm http://www.kb.cert.org/vuls/id/647796 http://www.securityfocus.com/archive/1/443037/100/0/threaded http://www.securityfocus.com/bid/19479 http://www.vupen.com/english/advisories/2006/3266 https://exchange.xforce.ibmcloud.com/vulnerabilitie •
CVSS: 4.6EPSS: 1%CPEs: 2EXPL: 0CVE-2006-1298
https://notcve.org/view.php?id=CVE-2006-1298
Format string vulnerability in the Job Engine service (bengine.exe) in the Media Server in Veritas Backup Exec 10d (10.1) for Windows Servers rev. 5629, Backup Exec 10.0 for Windows Servers rev. 5520, Backup Exec 10.0 for Windows Servers rev. 5484, and Backup Exec 9.1 for Windows Servers rev. 4691, when the job log mode is Full Detailed (aka Full Details), allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted filename on a machine that is backed up by Backup Exec. • http://secunia.com/advisories/19242 http://securitytracker.com/id?1015785 http://support.veritas.com/docs/282254 http://www.securityfocus.com/archive/1/428223/100/0/threaded http://www.securityfocus.com/bid/17096 http://www.symantec.com/avcenter/security/Content/2006.03.17b.html http://www.vupen.com/english/advisories/2006/0996 https://exchange.xforce.ibmcloud.com/vulnerabilities/25310 •
CVSS: 7.5EPSS: 0%CPEs: 17EXPL: 0CVE-2005-2080
https://notcve.org/view.php?id=CVE-2005-2080
Unknown vulnerability in Remote Agent for Windows Servers (RAWS) in VERITAS Backup Exec 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for NetWare, allows remote attackers to gain privileges by copying the handle for the server. • http://secunia.com/advisories/15789 http://seer.support.veritas.com/docs/276608.htm http://seer.support.veritas.com/docs/277429.htm http://www.securityfocus.com/bid/14026 •
CVSS: 7.5EPSS: 8%CPEs: 4EXPL: 0CVE-2005-2079
https://notcve.org/view.php?id=CVE-2005-2079
Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers allows remote attackers to execute arbitrary code. Desbordamiento de búfer en Admin Plus Pack Option for VERITAS Backup Exec 9.0 hasta 10.0 para Windows Servers permite que atacantes remotos ejecuten código arbitrario. • http://secunia.com/advisories/15789 http://seer.support.veritas.com/docs/276607.htm http://seer.support.veritas.com/docs/277429.htm http://www.kb.cert.org/vuls/id/352625 http://www.securityfocus.com/bid/14023 http://www.us-cert.gov/cas/techalerts/TA05-180A.html •