漏洞信息详情

Windows Servers Veritas Backup Exec Remote Agent特权提升漏洞

• CNNVD编号：CNNVD-200506-224
• 危害等级： 高危
  
• CVE编号： CVE-2005-2080
• 漏洞类型： 设计错误
• 发布时间： 2005-06-29
• 威胁类型： 远程
• 更新时间： 2006-03-27
• 厂        商： symantec_veritas
• 漏洞来源： Symantec Veritas

漏洞简介

Windows操作系统下的VERITAS Backup Exec 9.0至10.0版本，以及NetWare的9.0.4019 至9.1.307版本中，Windows Servers (RAWS)的Remote Agent软件存在未知漏洞，远程攻击者可通过拷贝服务器句柄来获取特权。

漏洞公告

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

Windows Servers 10.0修订版下的Veritas Software Backup Exec5484

Veritas Software Q175168.BEWS10.0.5520.ESD_277181.zip

http://support.veritas.com/docs/277181

Veritas Software Backup Exec for Windows Servers 10.0 rev. 5484 SP1

Veritas Software be5484RHF24_275514.exe

http://support.veritas.com/docs/275514

Veritas Software Backup Exec for Windows Servers 9.0 rev. 4367 SP1

Veritas Software be4367RHF21_276156.exe

http://support.veritas.com/docs/276156

Veritas Software Backup Exec for Windows Servers 9.0 rev. 4454 SP1

Veritas Software be4454RHF31_275911.exe

http://support.veritas.com/docs/275911

Veritas Software Backup Exec for NetWare Servers 9.0.4202

Veritas Software B904202HF1_277423.EXE

http://support.veritas.com/docs/277423

Veritas Software Backup Exec for Windows Servers 9.1 rev. 4691 SP2

Veritas Software be4691RHF52_275909.exe

http://support.veritas.com/docs/275909

Veritas Software Backup Exec for NetWare Servers 9.1.1067 .2

Veritas Software Backup Exec for NetWare Servers 9.1.1156

http://support.veritas.com/docs/277421

Veritas Software Backup Exec for NetWare Servers 9.1.1067 .3

Veritas Software Backup Exec for NetWare Servers 9.1.1156

http://support.veritas.com/docs/277421

Veritas Software Backup Exec for NetWare Servers 9.1.1127 .1

Veritas Software Backup Exec for NetWare Servers 9.1.1156

http://support.veritas.com/docs/277421

Veritas Software Backup Exec for NetWare Servers 9.1.1151 .1

Veritas Software Backup Exec for NetWare Servers 9.1.1156

http://support.veritas.com/docs/277421

Veritas Software Backup Exec for NetWare Servers 9.1.1152

Veritas Software Backup Exec for NetWare Servers 9.1.1156

http://support.veritas.com/docs/277421

Veritas Software Backup Exec for NetWare Servers 9.1.1152 .4

Veritas Software Backup Exec for NetWare Servers 9.1.1156

http://support.veritas.com/docs/277421

Veritas Software Backup Exec for NetWare Servers 9.1.1154

Veritas Software Backup Exec for NetWare Servers 9.1.1156

http://support.veritas.com/docs/277421

Veritas Software Backup Exec for NetWare Servers 9.1.306

Veritas Software Backup Exec for NetWare Servers 9.1.1156

http://support.veritas.com/docs/277421

Veritas Software Backup Exec for NetWare Servers 9.1.307

Veritas Software Backup Exec for NetWare Servers 9.1.1156

http://support.veritas.com/docs/277421

参考网址

来源: seer.support.veritas.com

链接:http://seer.support.veritas.com/docs/277429.htm

来源: seer.support.veritas.com

链接:http://seer.support.veritas.com/docs/276608.htm

来源: SECUNIA

名称: 15789

链接:http://secunia.com/advisories/15789

来源: BID

名称: 14026

链接:http://www.securityfocus.com/bid/14026

受影响实体

• Symantec_veritas Backup_exec:10.0  
• Symantec_veritas Backup_exec:9.0  
• Symantec_veritas Backup_exec:9.0.4019  
• Symantec_veritas Backup_exec:9.0.4170  
• Symantec_veritas Backup_exec:9.0.4172  

补丁

暂无