CVE-2004-1172

Symantec Veritas Backup Exec - Buffer Overflow

Title source: rule

Description

Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16331
exploitdb WORKING POC VERIFIED
by class101 · cremotewindows
https://www.exploit-db.com/exploits/750
metasploit WORKING POC NORMAL
by hdm · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/backupexec/name_service.rb

Scores

EPSS 0.8222
EPSS Percentile 99.2%

Classification

Status draft

Affected Products (5)

symantec_veritas/backup_exec
symantec_veritas/backup_exec
symantec_veritas/backup_exec
symantec_veritas/backup_exec
symantec_veritas/backup_exec

Timeline

Published Jan 10, 2005
Tracked Since Feb 18, 2026