Exploitation Summary
CVE-2005-2611 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including Metasploit, hdm, Unknown, including a Metasploit module auxiliary/admin/backupexec/dump.
AI-analyzed exploit summary This Metasploit module exploits a logic flaw in Veritas Backup Exec Windows Agent to download arbitrary files from the system. It uses a hardcoded password for authentication and establishes a data connection to exfiltrate files in MTF format.
Description
VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server.
Exploits (2)
This Metasploit module exploits a logic flaw in Veritas Backup Exec Windows Agent to download arbitrary files from the system. It uses a hardcoded password for authentication and establishes a data connection to exfiltrate files in MTF format.
This Metasploit module exploits a logic flaw in Veritas Backup Exec Windows Agent to download arbitrary files via NDMP protocol using a backdoor password. The output is in MTF format, extractable with 'NTKBUp'.