CVE-2005-2611 - CVE House
Back to Database
Status published Critical CVE-2005-2611

VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup...

Vulnerability Description

VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2611

Credits & Attribution

No credits recorded in the NVD database.

References

More from symantec veritas

View All →
CVE-2007-4516
The Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas...
Medium 4.3
CVE-2006-4228
Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1...
Critical 9
CVE-2006-4128
Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for...
Medium 6.5
CVE-2006-1298
Format string vulnerability in the Job Engine service (bengine.exe) in...
Medium 4.6
CVE-2006-1297
Unspecified vulnerability in Veritas Backup Exec for Windows Server Remote...
Medium 5

Affected Vendor

symantec veritas

View all reports →

Affected Software

backup exec, backup exec remote agent, netbackup
Vulnerable Versions:
netware_servers_9.0.4019, netware_servers_9.0.4170, netware_servers_9.0.4172, netware_servers_9.0.4174, netware_servers_9.0.4202, netware_servers_9.1.306, netware_servers_9.1.307, netware_servers_9.1.1067_.2, netware_servers_9.1.1067_.3, netware_servers_9.1.1127_.1, netware_servers_9.1.1151_.1, netware_servers_9.1.1152, netware_servers_9.1.1152_.4, netware_servers_9.1.1154, netware_servers_9.1.1156, windows_servers_8.6, windows_servers_9.0, windows_servers_9.0_rev._4367, windows_servers_9.0_rev._4367_sp1, windows_servers_9.0_rev._4454, windows_servers_9.0_rev._4454_sp1, windows_servers_9.1, windows_servers_9.1_rev._4691, windows_servers_9.1_rev._4691_sp2, windows_servers_10.0_rev._5484, windows_servers_10.0_rev._5484_sp1, windows_servers_10.0_rev._5520, netware_server, unix_linux_server, windows_server, netware_media_servers_4.5, netware_media_servers_4.5_fp1, netware_media_servers_4.5_fp2, netware_media_servers_4.5_fp3, netware_media_servers_4.5_fp4, netware_media_servers_4.5_fp5, netware_media_servers_4.5_fp6, netware_media_servers_4.5_fp7, netware_media_servers_4.5_fp8, netware_media_servers_4.5_mp1, netware_media_servers_4.5_mp2, netware_media_servers_4.5_mp3, netware_media_servers_4.5_mp4, netware_media_servers_4.5_mp5, netware_media_servers_4.5_mp6, netware_media_servers_4.5_mp7, netware_media_servers_4.5_mp8, netware_media_servers_5.0, netware_media_servers_5.0_mp1, netware_media_servers_5.0_mp2, netware_media_servers_5.0_mp3, netware_media_servers_5.0_mp4, netware_media_servers_5.0_mp5, netware_media_servers_5.1, netware_media_servers_5.1_mp1, netware_media_servers_5.1_mp2, netware_media_servers_5.1_mp3

Timeline

Official Publish: August 17th, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.