CVE-2011-0546

Published: May 31, 2011Modified: Apr 29, 2026

6.5

Vector

AV:A/AC:H/Au:S/C:C/I:C/A:C

Exploitability: 2.5 / Impact: 10.0

Source: NVD

Description

Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle attackers to execute NDMP commands via unspecified vectors.

Affected (5)

Products: Symantec: Backup Exec

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Symantec Backup Exec	Version 11.0
Symantec Backup Exec	Version 12.0
Symantec Backup Exec	Version 12.5
Symantec Backup Exec	Version 13.0
Symantec Backup Exec	Version 13.0 r2

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://marc.info/?l=bugtraq&m=131489365508507&w=2

Source: cve@mitre.org

http://secunia.com/advisories/44698

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/8300

Source: cve@mitre.org

http://www.securityfocus.com/bid/47824

Source: cve@mitre.org

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110526_00

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=131489365508507&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44698

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/8300

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/47824

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110526_00

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.