7.5
CVSSv2

CVE-2005-0773

Published: 18/06/2005 Updated: 08/03/2011
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 up to and including 10.0 for Windows, and 9.0.4019 up to and including 9.1.307 for Netware allows remote malicious users to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument.

Vulnerable Product Search on Vulmon Subscribe to Product

symantec veritas backup exec 9.0.4174

symantec veritas backup exec 9.0_rev.4367

symantec veritas backup exec 9.1.1067.3

symantec veritas backup exec 9.1.1151.1

symantec veritas backup exec 9.1_rev.4691_sp2

symantec veritas backup exec 10.0_rev.5484

symantec veritas backup exec 10.0_rev.5484_sp1

symantec veritas backup exec 9.0.4019

symantec veritas backup exec 9.0.4170

symantec veritas backup exec 9.1.1152.4

symantec veritas backup exec 9.1.1154

symantec veritas backup exec 9.1.306

symantec veritas backup exec 9.1.307

symantec veritas backup exec 9.1_rev.4691

symantec veritas backup exec 9.0_rev.4367_sp1

symantec veritas backup exec 9.0_rev.4454

symantec veritas backup exec 9.0_rev.4454_sp1

symantec veritas backup exec 9.1.1067.2

symantec veritas backup exec 9.0.4172

symantec veritas backup exec 9.0.4202

symantec veritas backup exec 9.1.1127.1

symantec veritas backup exec 9.1.1152

Exploits

## # $Id: remote_agentrb 9669 2010-07-03 03:13:45Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Met ...