Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:VERITAS:VERITAS-FILE-DUMP |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Veritas File Dump |
Release Date |
2005/08/31 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: Veritas File Dump
This signature detects the exploitation of the File Dump vulnerability in the Veritas backup packages. This vulnerability allows information leakage, which could be used to assist other attacks.
Extended Description
Veritas Backup Exec for Windows Servers, Veritas Backup Exec for NetWare Servers, NetBackup for NetWare Media Server Option, and Remote Agents for Windows, Unix/Linux, and NetWare servers are prone to a vulnerability regarding the unauthorized downloading of arbitrary files. A remote attacker can exploit this vulnerability to download arbitrary files, aiding them in further attack. A Metasploit Framework exploit is available and there are reports of this vulnerability currently being exploited in the wild.
Affected Products
- Veritas_software backup_exec_for_netware_servers 9.0.4019
- Veritas_software backup_exec_for_netware_servers 9.0.4170
- Veritas_software backup_exec_for_netware_servers 9.0.4172
- Veritas_software backup_exec_for_netware_servers 9.0.4174
- Veritas_software backup_exec_for_netware_servers 9.0.4202
- Veritas_software backup_exec_for_netware_servers 9.1.1067 .2
- Veritas_software backup_exec_for_netware_servers 9.1.1067 .3
- Veritas_software backup_exec_for_netware_servers 9.1.1127 .1
- Veritas_software backup_exec_for_netware_servers 9.1.1151 .1
- Veritas_software backup_exec_for_netware_servers 9.1.1152
- Veritas_software backup_exec_for_netware_servers 9.1.1152 .4
- Veritas_software backup_exec_for_netware_servers 9.1.1154
- Veritas_software backup_exec_for_netware_servers 9.1.1156
- Veritas_software backup_exec_for_netware_servers 9.1.306
- Veritas_software backup_exec_for_netware_servers 9.1.307
- Veritas_software backup_exec_for_windows_servers 10.0.0 rev. 5484
- Veritas_software backup_exec_for_windows_servers 10.0.0 rev. 5484 SP1
- Veritas_software backup_exec_for_windows_servers 10.0.0 rev. 5520
- Veritas_software backup_exec_for_windows_servers 8.0.0
- Veritas_software backup_exec_for_windows_servers 8.5.0
- Veritas_software backup_exec_for_windows_servers 8.6.0
- Veritas_software backup_exec_for_windows_servers 9.0.0
- Veritas_software backup_exec_for_windows_servers 9.0.0 rev. 4367
- Veritas_software backup_exec_for_windows_servers 9.0.0 rev. 4367 SP1
- Veritas_software backup_exec_for_windows_servers 9.0.0 rev. 4454
- Veritas_software backup_exec_for_windows_servers 9.0.0 rev. 4454 SP1
- Veritas_software backup_exec_for_windows_servers 9.1.0
- Veritas_software backup_exec_for_windows_servers 9.1.0 rev. 4691
- Veritas_software backup_exec_for_windows_servers 9.1.0 rev. 4691 SP2
- Veritas_software backup_exec_remote_agent_for_netware_server
- Veritas_software backup_exec_remote_agent_for_unix/linux_server
- Veritas_software backup_exec_remote_agent_for_windows_server
- Veritas_software netbackup_for_netware_media_servers 4.5.0
- Veritas_software netbackup_for_netware_media_servers 4.5.0 FP1
- Veritas_software netbackup_for_netware_media_servers 4.5.0 FP2
- Veritas_software netbackup_for_netware_media_servers 4.5.0 FP3
- Veritas_software netbackup_for_netware_media_servers 4.5.0 FP4
- Veritas_software netbackup_for_netware_media_servers 4.5.0 FP5
- Veritas_software netbackup_for_netware_media_servers 4.5.0 FP6
- Veritas_software netbackup_for_netware_media_servers 4.5.0 FP7
- Veritas_software netbackup_for_netware_media_servers 4.5.0 FP8
- Veritas_software netbackup_for_netware_media_servers 4.5.0 MP1
- Veritas_software netbackup_for_netware_media_servers 4.5.0 MP2
- Veritas_software netbackup_for_netware_media_servers 4.5.0 MP3
- Veritas_software netbackup_for_netware_media_servers 4.5.0 MP4
- Veritas_software netbackup_for_netware_media_servers 4.5.0 MP5
- Veritas_software netbackup_for_netware_media_servers 4.5.0 MP6
- Veritas_software netbackup_for_netware_media_servers 4.5.0 MP7
- Veritas_software netbackup_for_netware_media_servers 4.5.0 MP8
- Veritas_software netbackup_for_netware_media_servers 5.0.0
- Veritas_software netbackup_for_netware_media_servers 5.0.0 MP1
- Veritas_software netbackup_for_netware_media_servers 5.0.0 MP2
- Veritas_software netbackup_for_netware_media_servers 5.0.0 MP3
- Veritas_software netbackup_for_netware_media_servers 5.0.0 MP4
- Veritas_software netbackup_for_netware_media_servers 5.0.0 MP5
- Veritas_software netbackup_for_netware_media_servers 5.1.0
- Veritas_software netbackup_for_netware_media_servers 5.1.0 MP1
- Veritas_software netbackup_for_netware_media_servers 5.1.0 MP2
- Veritas_software netbackup_for_netware_media_servers 5.1.0 MP3
References
- BugTraq: 14551
- CVE: CVE-2005-2611
- URL: http://www.frsirt.com/exploits/20050811.backupexec_dump.pm.php