CVE-2004-1172: Buffer Overflow

Published Dec 22, 2004

Updated

Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname.

Affected Software

5 affected components

Symantec Veritas Backup Exec=8.0

Symantec Veritas Backup Exec=8.5

Symantec Veritas Backup Exec=8.6

Symantec Veritas Backup Exec=9.0

Symantec Veritas Backup Exec=9.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Veritas Backup Exec Agent Browser to a version that resolves this vulnerability.
Fixed in 8.60.3878Patch Hotfix 68
Upgrade
Upgrade Veritas Backup Exec Agent Browser to a version that resolves this vulnerability.
Fixed in 9.1.4691Patch Hotfix 40

Event History

Dec 22, 2004

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-1172?

CVE-2004-1172 has a high severity due to the potential for remote code execution.

How do I fix CVE-2004-1172?

To fix CVE-2004-1172, update Veritas Backup Exec to version 8.60.3878 Hotfix 68 or 9.1.4691 Hotfix 40 or later.

What software is affected by CVE-2004-1172?

CVE-2004-1172 affects Symantec Veritas Backup Exec versions 8.0 through 9.1.

Can CVE-2004-1172 be exploited remotely?

Yes, CVE-2004-1172 can be exploited remotely through a specially crafted registration request.

What type of vulnerability is CVE-2004-1172?

CVE-2004-1172 is a stack-based buffer overflow vulnerability.