CVE-2005-2611: Symantec Veritas Backup Exec

High severity, CVSS 10.0. EPSS: 87% chance of exploitation in the next 30 days.

VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write arbitrary files with the backup server.

Affected products

• Symantec Veritas Backup Exec: version netware_servers_9.0.4019 only; version netware_servers_9.0.4170 only; version netware_servers_9.0.4172 only; version netware_servers_9.0.4174 only; version netware_servers_9.0.4202 only; version netware_servers_9.1.306 only; …
• Symantec Veritas Backup Exec Remote Agent: version netware_server only; version unix_linux_server only; version windows_server only
• Symantec Veritas Netbackup: version netware_media_servers_4.5 only; version netware_media_servers_4.5_fp1 only; version netware_media_servers_4.5_fp2 only; version netware_media_servers_4.5_fp3 only; version netware_media_servers_4.5_fp4 only; version netware_media_servers_4.5_fp5 only; …

Published 2005-08-17. Last modified 2026-06-16.