Read the docs
TI-2005-00717 Aliases CVE-2005-0773GHSA-6cc3-qfmx-w8fp

Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for…

Priority HIGH 75Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument.

Why it matters now

EPSS 0.86365 99th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 22

CPEVersionsRoleVendor
cpe:2.3:a:symantec_veritas:backup_exec:9.0.4019:*:*:*:*:*:*:*9.0.4019VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.0.4170:*:*:*:*:*:*:*9.0.4170VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.0.4172:*:*:*:*:*:*:*9.0.4172VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.0.4174:*:*:*:*:*:*:*9.0.4174VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.0.4202:*:*:*:*:*:*:*9.0.4202VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367:*:*:*:*:*:*:*9.0_rev.4367VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367_sp1:*:*:*:*:*:*:*9.0_rev.4367_sp1VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454:*:*:*:*:*:*:*9.0_rev.4454VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454_sp1:*:*:*:*:*:*:*9.0_rev.4454_sp1VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.1.306:*:*:*:*:*:*:*9.1.306VulnerableSymantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.0.4019:*:*:*:*:*:*:* Versions 9.0.4019 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.0.4170:*:*:*:*:*:*:* Versions 9.0.4170 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.0.4172:*:*:*:*:*:*:* Versions 9.0.4172 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.0.4174:*:*:*:*:*:*:* Versions 9.0.4174 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.0.4202:*:*:*:*:*:*:* Versions 9.0.4202 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367:*:*:*:*:*:*:* Versions 9.0_rev.4367 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4367_sp1:*:*:*:*:*:*:* Versions 9.0_rev.4367_sp1 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454:*:*:*:*:*:*:* Versions 9.0_rev.4454 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.0_rev.4454_sp1:*:*:*:*:*:*:* Versions 9.0_rev.4454_sp1 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.1.306:*:*:*:*:*:*:* Versions 9.1.306 Vulnerable ·Symantec Veritas
Show 12 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:symantec_veritas:backup_exec:9.1.307:*:*:*:*:*:*:*9.1.307VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.1.1067.2:*:*:*:*:*:*:*9.1.1067.2VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.1.1067.3:*:*:*:*:*:*:*9.1.1067.3VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.1.1127.1:*:*:*:*:*:*:*9.1.1127.1VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.1.1151.1:*:*:*:*:*:*:*9.1.1151.1VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.1.1152:*:*:*:*:*:*:*9.1.1152VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.1.1152.4:*:*:*:*:*:*:*9.1.1152.4VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.1.1154:*:*:*:*:*:*:*9.1.1154VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691:*:*:*:*:*:*:*9.1_rev.4691VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691_sp2:*:*:*:*:*:*:*9.1_rev.4691_sp2VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484:*:*:*:*:*:*:*10.0_rev.5484VulnerableSymantec Veritas
cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484_sp1:*:*:*:*:*:*:*10.0_rev.5484_sp1VulnerableSymantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.1.307:*:*:*:*:*:*:* Versions 9.1.307 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.1.1067.2:*:*:*:*:*:*:* Versions 9.1.1067.2 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.1.1067.3:*:*:*:*:*:*:* Versions 9.1.1067.3 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.1.1127.1:*:*:*:*:*:*:* Versions 9.1.1127.1 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.1.1151.1:*:*:*:*:*:*:* Versions 9.1.1151.1 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.1.1152:*:*:*:*:*:*:* Versions 9.1.1152 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.1.1152.4:*:*:*:*:*:*:* Versions 9.1.1152.4 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.1.1154:*:*:*:*:*:*:* Versions 9.1.1154 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691:*:*:*:*:*:*:* Versions 9.1_rev.4691 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:9.1_rev.4691_sp2:*:*:*:*:*:*:* Versions 9.1_rev.4691_sp2 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484:*:*:*:*:*:*:* Versions 10.0_rev.5484 Vulnerable ·Symantec Veritas
  • cpe:2.3:a:symantec_veritas:backup_exec:10.0_rev.5484_sp1:*:*:*:*:*:*:* Versions 10.0_rev.5484_sp1 Vulnerable ·Symantec Veritas

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2005-0773
  2. 2026-10-03 Alias added: GHSA-6cc3-qfmx-w8fp

References

Patch 4

Advisory 1

Other 1

  • TI-2005-02475 VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers… CVSS 2.0HIGH 10.0
  • TI-2004-01066 Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before… CVSS 2.0HIGH 10.0
  • TI-2005-00715 VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote… CVSS 2.0HIGH 10.0
  • TI-2005-01967 Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0… CVSS 2.0HIGH 7.5
  • TI-2005-01939 Buffer overflow in the VERITAS Backup Exec Web Administration Console (BEWAC) 9.0 4367… CVSS 2.0HIGH 7.5
  • TI-2006-04000 Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server… CVSS 2.0MEDIUM 6.5
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences