CVE-2005-0772

HIGH

VERITAS Backup Exec 9.0-10.0 and 9.0.4019-9.1.307 - Denial of Service via NDMLSRVR.DLL Packet Handling

Title source: llm

Description

VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL or (2) a request packet with an invalid (non-0) "Error Status" value, which triggers a null dereference.

References (6)

Core 6

Core References

Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1014273

Broken Link x_refsource_confirm

http://seer.support.veritas.com/docs/276533.htm

Broken Link, Vendor Advisory third-party-advisory x_refsource_idefense

http://www.idefense.com/application/poi/display?id=270&type=vulnerabilities&flashstatus=true

Broken Link third-party-advisory x_refsource_idefense

http://www.idefense.com/application/poi/display?id=271&type=vulnerabilities

Broken Link x_refsource_confirm

http://seer.support.veritas.com/docs/277485.htm

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/15789

Scores

CVSS v3 7.5

EPSS 0.3571

EPSS Percentile 98.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-476

Status published

Products (2)

veritas/backup_exec 9.0 - 10.0

veritas/backup_exec 9.0.4019 - 9.1.307

Published Jun 28, 2005

Tracked Since Feb 18, 2026