NVD

Id
7604  
Name
CVE-2011-0546  
Description
Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle attackers to execute NDMP commands via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
2.5  
CVSS Vector
(AV:A/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-05-31  
Modified Date
2016-08-22  
Seq
2011-0546  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42941 7604 CVE-2011-0546 SSRT100506  View
42942 7604 CVE-2011-0546 8300  View
42943 7604 CVE-2011-0546 47824  View
42944 7604 CVE-2011-0546 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110526_00  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31651 JVNDB-2011-001891 Symantec Backup Exec における NDMP コマンドを実行される脆弱性 Symantec Backup Exec は、メディアサーバとリモートエージェント間で送信される識別情報を検証しないため、NDMP コマンドを実行される脆弱性が存在します。 CVE-2011-0546 48453 CVE-2011-0546 7604 6.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001891.html 2011-05-26 2011-09-14 View