CVE-2005-0771

VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/15789	Patch Vendor Advisory
http://securitytracker.com/id?1014273	Patch
http://seer.support.veritas.com/docs/276605.htm	Patch Vendor Advisory
http://seer.support.veritas.com/docs/277429.htm	Patch
http://www.idefense.com/application/poi/display?id=269&type=vulnerabilities&flashstatus=true
http://www.kb.cert.org/vuls/id/584505	Patch Third Party Advisory US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-180A.html	Patch Third Party Advisory US Government Resource
http://secunia.com/advisories/15789	Patch Vendor Advisory
http://securitytracker.com/id?1014273	Patch
http://seer.support.veritas.com/docs/276605.htm	Patch Vendor Advisory
http://seer.support.veritas.com/docs/277429.htm	Patch
http://www.idefense.com/application/poi/display?id=269&type=vulnerabilities&flashstatus=true
http://www.kb.cert.org/vuls/id/584505	Patch Third Party Advisory US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-180A.html	Patch Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367:::::::*
	cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454:::::::*
	cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691:::::::*
	cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484:::::::*

History

No history.

Information

Published : 2005-06-23 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-2005-0771

Mitre link : CVE-2005-0771

CVE.ORG link : CVE-2005-0771

JSON object : View

Products Affected

symantec_veritas

backup_exec

CWE

NVD-CWE-Other

{"id": "CVE-2005-0771", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-06-23T04:00:00.000", "references": [{"url": "http://secunia.com/advisories/15789", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1014273", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://seer.support.veritas.com/docs/276605.htm", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://seer.support.veritas.com/docs/277429.htm", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.idefense.com/application/poi/display?id=269&type=vulnerabilities&flashstatus=true", "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/584505", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA05-180A.html", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/15789", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1014273", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seer.support.veritas.com/docs/276605.htm", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seer.support.veritas.com/docs/277429.htm", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.idefense.com/application/poi/display?id=269&type=vulnerabilities&flashstatus=true", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/584505", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA05-180A.html", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7BAD90A9-B5AA-4D6A-9207-2A302BD2774C"}, {"criteria": "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "555367EF-249E-4310-8A06-E59947D33576"}, {"criteria": "cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B969FA8-F5F8-4C34-A99F-1630EAD4EA18"}, {"criteria": "cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15FFFB18-9F1D-4630-BD13-0F34A1D6E5D6"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}