CVE-2005-2611

Name: CVE-2005-2611
Creator: NVD / NIST
Published: 2005-08-17T04:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 87.03%

Last modified Jun 16, 2026

CVE-2005-2611 is a vulnerability of currently unknown severity. VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server.. EPSS estimates a 87.03% chance of exploitation in the next 30 days.

Description

VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server.

Metrics

EPSS Probability

87.03%

99.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Symantec Veritas	Backup Exec	netware_servers_9.0.4019
Symantec Veritas	Backup Exec	netware_servers_9.0.4170
Symantec Veritas	Backup Exec	netware_servers_9.0.4172
Symantec Veritas	Backup Exec	netware_servers_9.0.4174
Symantec Veritas	Backup Exec	netware_servers_9.0.4202
Symantec Veritas	Backup Exec	netware_servers_9.1.306
Symantec Veritas	Backup Exec	netware_servers_9.1.307
Symantec Veritas	Backup Exec	netware_servers_9.1.1067_.2
Symantec Veritas	Backup Exec	netware_servers_9.1.1067_.3
Symantec Veritas	Backup Exec	netware_servers_9.1.1127_.1
Symantec Veritas	Backup Exec	netware_servers_9.1.1151_.1
Symantec Veritas	Backup Exec	netware_servers_9.1.1152
Symantec Veritas	Backup Exec	netware_servers_9.1.1152_.4
Symantec Veritas	Backup Exec	netware_servers_9.1.1154
Symantec Veritas	Backup Exec	netware_servers_9.1.1156
Symantec Veritas	Backup Exec	windows_servers_8.6
Symantec Veritas	Backup Exec	windows_servers_9.0
Symantec Veritas	Backup Exec	windows_servers_9.0_rev._4367
Symantec Veritas	Backup Exec	windows_servers_9.0_rev._4367_sp1
Symantec Veritas	Backup Exec	windows_servers_9.0_rev._4454
Symantec Veritas	Backup Exec	windows_servers_9.0_rev._4454_sp1
Symantec Veritas	Backup Exec	windows_servers_9.1
Symantec Veritas	Backup Exec	windows_servers_9.1_rev._4691
Symantec Veritas	Backup Exec	windows_servers_9.1_rev._4691_sp2
Symantec Veritas	Backup Exec	windows_servers_10.0_rev._5484
Symantec Veritas	Backup Exec	windows_servers_10.0_rev._5484_sp1
Symantec Veritas	Backup Exec	windows_servers_10.0_rev._5520
Symantec Veritas	Backup Exec Remote Agent	netware_server
Symantec Veritas	Backup Exec Remote Agent	unix_linux_server
Symantec Veritas	Backup Exec Remote Agent	windows_server
Symantec Veritas	Netbackup	netware_media_servers_4.5
Symantec Veritas	Netbackup	netware_media_servers_4.5_fp1
Symantec Veritas	Netbackup	netware_media_servers_4.5_fp2
Symantec Veritas	Netbackup	netware_media_servers_4.5_fp3
Symantec Veritas	Netbackup	netware_media_servers_4.5_fp4
Symantec Veritas	Netbackup	netware_media_servers_4.5_fp5
Symantec Veritas	Netbackup	netware_media_servers_4.5_fp6
Symantec Veritas	Netbackup	netware_media_servers_4.5_fp7
Symantec Veritas	Netbackup	netware_media_servers_4.5_fp8
Symantec Veritas	Netbackup	netware_media_servers_4.5_mp1
Symantec Veritas	Netbackup	netware_media_servers_4.5_mp2
Symantec Veritas	Netbackup	netware_media_servers_4.5_mp3
Symantec Veritas	Netbackup	netware_media_servers_4.5_mp4
Symantec Veritas	Netbackup	netware_media_servers_4.5_mp5
Symantec Veritas	Netbackup	netware_media_servers_4.5_mp6
Symantec Veritas	Netbackup	netware_media_servers_4.5_mp7
Symantec Veritas	Netbackup	netware_media_servers_4.5_mp8
Symantec Veritas	Netbackup	netware_media_servers_5.0
Symantec Veritas	Netbackup	netware_media_servers_5.0_mp1
Symantec Veritas	Netbackup	netware_media_servers_5.0_mp2

Showing 50 of 57 affected configurations. See NVD for the full list.

References

http://secunia.com/advisories/16403Patch, Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.htmlPatch, Vendor Advisory
http://securitytracker.com/id?1014662Exploit, Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/378957Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/14551Exploit
http://www.us-cert.gov/cas/techalerts/TA05-224A.htmlThird Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2005/1387
https://exchange.xforce.ibmcloud.com/vulnerabilities/21793
http://secunia.com/advisories/16403Patch, Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2005.08.12b.htmlPatch, Vendor Advisory
http://securitytracker.com/id?1014662Exploit, Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/378957Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/14551Exploit
http://www.us-cert.gov/cas/techalerts/TA05-224A.htmlThird Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2005/1387
https://exchange.xforce.ibmcloud.com/vulnerabilities/21793

Timeline

Published: Aug 17, 2005
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2005-2611?

How severe is CVE-2005-2611?

Severity scoring for CVE-2005-2611 is pending analysis. The EPSS model estimates a 87.03% probability of exploitation in the next 30 days.

How do I fix CVE-2005-2611?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2005-2611?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST