CVE-2005-2611: Critical severity Symantec Veritas Backup Exec Remote Agent vulnerability

Published Aug 17, 2005
·
Updated

VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server.

Affected Software

57 affected components
Symantec Veritas Backup Exec Remote Agent=netware_server
Symantec Veritas Netbackup=netware_media_servers_4.5_mp3
Symantec Veritas Netbackup=netware_media_servers_4.5_mp7
Symantec Veritas Backup Exec=netware_servers_9.0.4019
Symantec Veritas Backup Exec=windows_servers_9.1_rev._4691
Symantec Veritas Netbackup=netware_media_servers_4.5_mp4
Symantec Veritas Netbackup=netware_media_servers_4.5_fp1
Symantec Veritas Netbackup=netware_media_servers_4.5_mp8
Symantec Veritas Backup Exec Remote Agent=windows_server
Symantec Veritas Netbackup=netware_media_servers_4.5_fp8
Symantec Veritas Backup Exec=windows_servers_9.1
Symantec Veritas Netbackup=netware_media_servers_5.1_mp2
Symantec Veritas Backup Exec=windows_servers_9.0_rev._4367_sp1
Symantec Veritas Backup Exec=netware_servers_9.0.4174
Symantec Veritas Backup Exec=windows_servers_9.0_rev._4454
Symantec Veritas Netbackup=netware_media_servers_4.5_fp6
Symantec Veritas Netbackup=netware_media_servers_4.5_mp5
Symantec Veritas Netbackup=netware_media_servers_4.5_fp4
Symantec Veritas Backup Exec=netware_servers_9.1.1152
Symantec Veritas Netbackup=netware_media_servers_4.5
Symantec Veritas Backup Exec=netware_servers_9.1.1156
Symantec Veritas Netbackup=netware_media_servers_5.0_mp4
Symantec Veritas Netbackup=netware_media_servers_5.0_mp1
Symantec Veritas Backup Exec=windows_servers_10.0_rev._5484_sp1
Symantec Veritas Backup Exec=windows_servers_9.0
Symantec Veritas Netbackup=netware_media_servers_5.1_mp1
Symantec Veritas Netbackup=netware_media_servers_4.5_fp3
Symantec Veritas Netbackup=netware_media_servers_5.0
Symantec Veritas Backup Exec Remote Agent=unix_linux_server
Symantec Veritas Backup Exec=windows_servers_8.6
Symantec Veritas Backup Exec=netware_servers_9.1.1151_.1
Symantec Veritas Backup Exec=netware_servers_9.1.307
Symantec Veritas Backup Exec=netware_servers_9.0.4202
Symantec Veritas Netbackup=netware_media_servers_4.5_fp7
Symantec Veritas Backup Exec=netware_servers_9.1.1067_.3
Symantec Veritas Backup Exec=netware_servers_9.0.4172
Symantec Veritas Netbackup=netware_media_servers_5.1_mp3
Symantec Veritas Backup Exec=netware_servers_9.1.1127_.1
Symantec Veritas Netbackup=netware_media_servers_4.5_fp2
Symantec Veritas Backup Exec=netware_servers_9.1.306
Symantec Veritas Netbackup=netware_media_servers_4.5_mp2
Symantec Veritas Netbackup=netware_media_servers_5.0_mp5
Symantec Veritas Netbackup=netware_media_servers_5.0_mp2
Symantec Veritas Netbackup=netware_media_servers_4.5_fp5
Symantec Veritas Netbackup=netware_media_servers_4.5_mp6
Symantec Veritas Backup Exec=windows_servers_9.1_rev._4691_sp2
Symantec Veritas Backup Exec=windows_servers_9.0_rev._4367
Symantec Veritas Netbackup=netware_media_servers_5.1
Symantec Veritas Netbackup=netware_media_servers_4.5_mp1
Symantec Veritas Backup Exec=windows_servers_10.0_rev._5484
Symantec Veritas Backup Exec=netware_servers_9.0.4170
Symantec Veritas Netbackup=netware_media_servers_5.0_mp3
Symantec Veritas Backup Exec=netware_servers_9.1.1154
Symantec Veritas Backup Exec=windows_servers_9.0_rev._4454_sp1
Symantec Veritas Backup Exec=netware_servers_9.1.1067_.2
Symantec Veritas Backup Exec=windows_servers_10.0_rev._5520
Symantec Veritas Backup Exec=netware_servers_9.1.1152_.4

Remediation

Patch Available

http://secunia.com/advisories/16403

Patch Available

http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.html

Patch Available

http://securitytracker.com/id?1014662

Patch Available

http://www.kb.cert.org/vuls/id/378957

Event History

Aug 17, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2005-2611?

CVE-2005-2611 is rated as a critical vulnerability due to its potential to allow unauthorized access to sensitive data.

2

How do I fix CVE-2005-2611?

To fix CVE-2005-2611, it is recommended to update to a version of the affected software that implements secure password practices.

3

Which software versions are affected by CVE-2005-2611?

CVE-2005-2611 affects multiple versions of Symantec Veritas Backup Exec and NetBackup for Windows and NetWare.

4

What impact can CVE-2005-2611 have on my system?

Exploiting CVE-2005-2611 could allow remote attackers to read and write sensitive data, compromising data integrity and confidentiality.

5

Is there a workaround for CVE-2005-2611?

Currently, the best mitigation for CVE-2005-2611 is to apply the recommended security updates provided by the vendor.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203