CVE-2011-0546

Published May 31, 2011

Last updated 8 years ago

Overview

Description: Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle attackers to execute NDMP commands via unspecified vectors.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.5
Impact score: 10
Exploitability score: 2.5
Vector string: AV:A/AC:H/Au:S/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:symantec:backup_exec:11.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "588376ED-95B0-4A05-B412-F52CDD9E76F4"
          },
          {
            "criteria": "cpe:2.3:a:symantec:backup_exec:12.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6B232C57-2543-4E88-96CF-A91B4915DC4F"
          },
          {
            "criteria": "cpe:2.3:a:symantec:backup_exec:12.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AF55A13F-D3C7-4497-869D-2B0EB8FBE3AB"
          },
          {
            "criteria": "cpe:2.3:a:symantec:backup_exec:13.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "71E52C0A-48F6-4349-AF54-1614662996A7"
          },
          {
            "criteria": "cpe:2.3:a:symantec:backup_exec:13.0:r2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "95269E45-6B4B-46D5-AE55-4025ECF60CB5"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References