Unscored severity · published May 31, 2011
CVE-2011-0546
Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle attackers to execute NDMP commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Backup Exec · Symantec
11.0; 12.0; 12.5; 13.0; 13.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0546
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0546
marc.info
http://marc.info/?l=bugtraq&m=131489365508507&w=2
Vendor Advisory
http://secunia.com/advisories/44698
securityreason.com
http://securityreason.com/securityalert/8300
www.securityfocus.com
http://www.securityfocus.com/bid/47824
www.symantec.com
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110526_00
More from Backup Exec
–
CVE-2013-4677
Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read and Everyone: Change) for backup data files, which allows local users to…
–
CVE-2013-4678
The NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote authenticated users to obtain sensitive host-version…
–
CVE-2013-4676
Multiple cross-site scripting (XSS) vulnerabilities in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allow remote attackers to inject arbitrary web script or…
–
CVE-2013-4575
Heap-based buffer overflow in the utility program in the Linux agent in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote attackers to cause a…