CVE-2005-0772

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-0772
VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL or (2) a request packet with an invalid (non-0) "Error Status" value, which triggers a null dereference.

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://www.idefense.com/application/poi/display?id=270&type=vulnerabilities&flashstatus=true Broken Link Vendor Advisory
http://www.idefense.com/application/poi/display?id=271&type=vulnerabilities Broken Link
http://seer.support.veritas.com/docs/276533.htm Broken Link
http://seer.support.veritas.com/docs/277485.htm Broken Link
http://securitytracker.com/id?1014273 Broken Link Third Party Advisory VDB Entry
http://secunia.com/advisories/15789 Broken Link
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:netware:*:*
cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:windows_server:*:*
History

28 Dec 2023, 15:29

Type Values Removed Values Added
CPE cpe:2.3:a:symantec_veritas:backup_exec:10.0:*:*:*:*:*:*:*
cpe:2.3:a:symantec_veritas:backup_exec:10.0_sp1:*:*:*:*:*:*:*		 cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:windows_server:*:*
cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:netware:*:*
References (CONFIRM) http://seer.support.veritas.com/docs/276533.htm - (CONFIRM) http://seer.support.veritas.com/docs/276533.htm - Broken Link
References (SECUNIA) http://secunia.com/advisories/15789 - (SECUNIA) http://secunia.com/advisories/15789 - Broken Link
References (IDEFENSE) http://www.idefense.com/application/poi/display?id=270&type=vulnerabilities&flashstatus=true - Vendor Advisory (IDEFENSE) http://www.idefense.com/application/poi/display?id=270&type=vulnerabilities&flashstatus=true - Broken Link, Vendor Advisory
References (IDEFENSE) http://www.idefense.com/application/poi/display?id=271&type=vulnerabilities - (IDEFENSE) http://www.idefense.com/application/poi/display?id=271&type=vulnerabilities - Broken Link
References (SECTRACK) http://securitytracker.com/id?1014273 - (SECTRACK) http://securitytracker.com/id?1014273 - Broken Link, Third Party Advisory, VDB Entry
References (CONFIRM) http://seer.support.veritas.com/docs/277485.htm - (CONFIRM) http://seer.support.veritas.com/docs/277485.htm - Broken Link
CWE NVD-CWE-Other CWE-476
First Time Veritas
Veritas backup Exec
CVSS v2 : 5.0
v3 : unknown 		v2 : 5.0
v3 : 7.5
Information

Published : 2005-06-28 04:00

Updated : 2023-12-28 15:29

NVD link : CVE-2005-0772

Mitre link : CVE-2005-0772

JSON object : View

Products Affected

veritas

  • backup_exec
CWE
CWE-476

NULL Pointer Dereference