VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Backup_exec | Symantec_veritas | netware_servers_9.0.4019 (including) | netware_servers_9.0.4019 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.0.4170 (including) | netware_servers_9.0.4170 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.0.4172 (including) | netware_servers_9.0.4172 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.0.4174 (including) | netware_servers_9.0.4174 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.0.4202 (including) | netware_servers_9.0.4202 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.1.306 (including) | netware_servers_9.1.306 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.1.307 (including) | netware_servers_9.1.307 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.1.1067_.2 (including) | netware_servers_9.1.1067_.2 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.1.1067_.3 (including) | netware_servers_9.1.1067_.3 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.1.1127_.1 (including) | netware_servers_9.1.1127_.1 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.1.1151_.1 (including) | netware_servers_9.1.1151_.1 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.1.1152 (including) | netware_servers_9.1.1152 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.1.1152_.4 (including) | netware_servers_9.1.1152_.4 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.1.1154 (including) | netware_servers_9.1.1154 (including) |
| Backup_exec | Symantec_veritas | netware_servers_9.1.1156 (including) | netware_servers_9.1.1156 (including) |
| Backup_exec | Symantec_veritas | windows_servers_8.6 (including) | windows_servers_8.6 (including) |
| Backup_exec | Symantec_veritas | windows_servers_9.0 (including) | windows_servers_9.0 (including) |
| Backup_exec | Symantec_veritas | windows_servers_9.0_rev._4367 (including) | windows_servers_9.0_rev._4367 (including) |
| Backup_exec | Symantec_veritas | windows_servers_9.0_rev._4367_sp1 (including) | windows_servers_9.0_rev._4367_sp1 (including) |
| Backup_exec | Symantec_veritas | windows_servers_9.0_rev._4454 (including) | windows_servers_9.0_rev._4454 (including) |
| Backup_exec | Symantec_veritas | windows_servers_9.0_rev._4454_sp1 (including) | windows_servers_9.0_rev._4454_sp1 (including) |
| Backup_exec | Symantec_veritas | windows_servers_9.1 (including) | windows_servers_9.1 (including) |
| Backup_exec | Symantec_veritas | windows_servers_9.1_rev._4691 (including) | windows_servers_9.1_rev._4691 (including) |
| Backup_exec | Symantec_veritas | windows_servers_9.1_rev._4691_sp2 (including) | windows_servers_9.1_rev._4691_sp2 (including) |
| Backup_exec | Symantec_veritas | windows_servers_10.0_rev._5484 (including) | windows_servers_10.0_rev._5484 (including) |
| Backup_exec | Symantec_veritas | windows_servers_10.0_rev._5484_sp1 (including) | windows_servers_10.0_rev._5484_sp1 (including) |
| Backup_exec | Symantec_veritas | windows_servers_10.0_rev._5520 (including) | windows_servers_10.0_rev._5520 (including) |
| Backup_exec_remote_agent | Symantec_veritas | netware_server (including) | netware_server (including) |
| Backup_exec_remote_agent | Symantec_veritas | unix_linux_server (including) | unix_linux_server (including) |
| Backup_exec_remote_agent | Symantec_veritas | windows_server (including) | windows_server (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5 (including) | netware_media_servers_4.5 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_fp1 (including) | netware_media_servers_4.5_fp1 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_fp2 (including) | netware_media_servers_4.5_fp2 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_fp3 (including) | netware_media_servers_4.5_fp3 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_fp4 (including) | netware_media_servers_4.5_fp4 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_fp5 (including) | netware_media_servers_4.5_fp5 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_fp6 (including) | netware_media_servers_4.5_fp6 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_fp7 (including) | netware_media_servers_4.5_fp7 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_fp8 (including) | netware_media_servers_4.5_fp8 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_mp1 (including) | netware_media_servers_4.5_mp1 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_mp2 (including) | netware_media_servers_4.5_mp2 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_mp3 (including) | netware_media_servers_4.5_mp3 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_mp4 (including) | netware_media_servers_4.5_mp4 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_mp5 (including) | netware_media_servers_4.5_mp5 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_mp6 (including) | netware_media_servers_4.5_mp6 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_mp7 (including) | netware_media_servers_4.5_mp7 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_4.5_mp8 (including) | netware_media_servers_4.5_mp8 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_5.0 (including) | netware_media_servers_5.0 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_5.0_mp1 (including) | netware_media_servers_5.0_mp1 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_5.0_mp2 (including) | netware_media_servers_5.0_mp2 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_5.0_mp3 (including) | netware_media_servers_5.0_mp3 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_5.0_mp4 (including) | netware_media_servers_5.0_mp4 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_5.0_mp5 (including) | netware_media_servers_5.0_mp5 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_5.1 (including) | netware_media_servers_5.1 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_5.1_mp1 (including) | netware_media_servers_5.1_mp1 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_5.1_mp2 (including) | netware_media_servers_5.1_mp2 (including) |
| Netbackup | Symantec_veritas | netware_media_servers_5.1_mp3 (including) | netware_media_servers_5.1_mp3 (including) |
References
- http://secunia.com/advisories/16403
- http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.html
- http://securitytracker.com/id?1014662
- http://www.kb.cert.org/vuls/id/378957
- http://www.securityfocus.com/bid/14551
- http://www.us-cert.gov/cas/techalerts/TA05-224A.html
- http://www.vupen.com/english/advisories/2005/1387
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21793
- http://secunia.com/advisories/16403
- http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.html
- http://securitytracker.com/id?1014662
- http://www.kb.cert.org/vuls/id/378957
- http://www.securityfocus.com/bid/14551
- http://www.us-cert.gov/cas/techalerts/TA05-224A.html
- http://www.vupen.com/english/advisories/2005/1387
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21793