Login Request a demo
High severity · published Jun 28, 2005
CVE-2005-0772
VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via…
7.5
CVSS
35.7%
EPSS
No
On KEV
Description
VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL or (2) a request packet with an invalid (non-0) "Error Status" value, which triggers a null dereference.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)35.7% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Backup Exec · Veritas
9.0 through 10.0; 9.0.4019 through 9.1.307 · source: NVD
Affected product
BE
Backup Exec
Veritas
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0772
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0772
Broken Link
http://secunia.com/advisories/15789
Broken Link
http://securitytracker.com/id?1014273
Broken Link
http://seer.support.veritas.com/docs/276533.htm
Broken Link
http://seer.support.veritas.com/docs/277485.htm
Broken Link
http://www.idefense.com/application/poi/display?id=270&type=vulnerabilities&flashstatus=true
Broken Link
http://www.idefense.com/application/poi/display?id=271&type=vulnerabilities
More from Backup Exec
9.8
CVE-2021-27877
Veritas Backup Exec Agent Improper Authentication Vulnerability
8.8
CVE-2021-27878
Veritas Backup Exec Agent Command Execution Vulnerability
8.1
CVE-2021-27876
Veritas Backup Exec Agent File Access Vulnerability
9.8
CVE-2017-8895
In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in multiple agents that can…
8.8
CVE-2020-36167
An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517