CVE:CVE-2005-0773
CNNVD:CNNVD-200506-181
Veritas Backup Exec Remote Agent是一款支持网络数据管理协议(NDMP)的数据备份和恢复解决方案。
Veritas Backup Exec Remote Agent在处理用户认证请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。
当客户端发送一个类型3的认证请求，而且带有一个超长的Password字段时会触发缓冲区溢出漏洞，导致执行任意指令。
solution:Upgrade symantec_veritas backup_exec to a higher version than 9.0.4019,9.0.4170,9.0.4172,9.0.4174,9.0.4202,9.0_rev.4367,9.0_rev.4367_sp1,9.0_rev.4454,9.0_rev.4454_sp1,9.1.306,9.1.307,9.1.1067.2,9.1.1067.3,9.1.1127.1,9.1.1151.1,9.1.1152,9.1.1152.4,9.1.1154,9.1_rev.4691,9.1_rev.4691_sp2,10.0_rev.5484,10.0_rev.5484_sp1,and avoid the version 9.0.4019,9.0.4170,9.0.4172,9.0.4174,9.0.4202,9.0_rev.4367,9.0_rev.4367_sp1,9.0_rev.4454,9.0_rev.4454_sp1,9.1.306,9.1.307,9.1.1067.2,9.1.1067.3,9.1.1127.1,9.1.1151.1,9.1.1152,9.1.1152.4,9.1.1154,9.1_rev.4691,9.1_rev.4691_sp2,10.0_rev.5484,10.0_rev.5484_sp1