CVE-2005-2079

Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers allows remote attackers to execute arbitrary code.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/15789	Patch Vendor Advisory
http://seer.support.veritas.com/docs/276607.htm	Patch Vendor Advisory
http://seer.support.veritas.com/docs/277429.htm	Patch
http://www.kb.cert.org/vuls/id/352625	Patch Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/14023
http://www.us-cert.gov/cas/techalerts/TA05-180A.html	Patch Third Party Advisory US Government Resource
http://secunia.com/advisories/15789	Patch Vendor Advisory
http://seer.support.veritas.com/docs/276607.htm	Patch Vendor Advisory
http://seer.support.veritas.com/docs/277429.htm	Patch
http://www.kb.cert.org/vuls/id/352625	Patch Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/14023
http://www.us-cert.gov/cas/techalerts/TA05-180A.html	Patch Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367:::::::*
	cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454:::::::*
	cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691:::::::*
	cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484:::::::*

History

No history.

Information

Published : 2005-08-02 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-2005-2079

Mitre link : CVE-2005-2079

CVE.ORG link : CVE-2005-2079

JSON object : View

Products Affected

symantec_veritas

backup_exec

CWE

NVD-CWE-Other

{"id": "CVE-2005-2079", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-08-02T04:00:00.000", "references": [{"url": "http://secunia.com/advisories/15789", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://seer.support.veritas.com/docs/276607.htm", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://seer.support.veritas.com/docs/277429.htm", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/352625", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/14023", "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA05-180A.html", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/15789", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seer.support.veritas.com/docs/276607.htm", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seer.support.veritas.com/docs/277429.htm", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/352625", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/14023", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA05-180A.html", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers allows remote attackers to execute arbitrary code."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en Admin Plus Pack Option for VERITAS Backup Exec 9.0 hasta 10.0 para Windows Servers permite que atacantes remotos ejecuten c\u00f3digo arbitrario."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7BAD90A9-B5AA-4D6A-9207-2A302BD2774C"}, {"criteria": "cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "555367EF-249E-4310-8A06-E59947D33576"}, {"criteria": "cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B969FA8-F5F8-4C34-A99F-1630EAD4EA18"}, {"criteria": "cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15FFFB18-9F1D-4630-BD13-0F34A1D6E5D6"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}