ID CVE-2005-0772
Summary VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL or (2) a request packet with an invalid (non-0) "Error Status" value, which triggers a null dereference.
References
Vulnerable Configurations
  • cpe:2.3:a:veritas:backup_exec:9.0.4019:*:*:*:*:netware:*:*
    cpe:2.3:a:veritas:backup_exec:9.0.4019:*:*:*:*:netware:*:*
  • cpe:2.3:a:veritas:backup_exec:9.1.307:*:*:*:*:netware:*:*
    cpe:2.3:a:veritas:backup_exec:9.1.307:*:*:*:*:netware:*:*
  • cpe:2.3:a:veritas:backup_exec:9.0:*:*:*:*:windows_server:*:*
    cpe:2.3:a:veritas:backup_exec:9.0:*:*:*:*:windows_server:*:*
  • cpe:2.3:a:veritas:backup_exec:10.0:*:*:*:*:windows_server:*:*
    cpe:2.3:a:veritas:backup_exec:10.0:*:*:*:*:windows_server:*:*
CVSS
Base: 5.0 (as of 28-12-2023 - 15:29)
Impact:
Exploitability:
CWE CWE-476
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
confirm
idefense
  • 20050623 Veritas Backup Exec Agent Error Status Remote DoS Vulnerability
  • 20050623 Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability
sectrack 1014273
secunia 15789
Last major update 28-12-2023 - 15:29
Published 28-06-2005 - 04:00
Last modified 28-12-2023 - 15:29
Back to Top