VDB
CVE-2004-1172
CVE-2004-1172
PUBLISHED
KEV
CVSS 10 CRITICAL
Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname.
EPSS 82.22% · 99.2th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
82.22%
99.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| symantec_veritas | backup_exec | 8.0, 8.5, 8.6 |
| n/a | n/a | n/a |
Timeline
- Dec 22, 2004 CVE Published
- Jun 22, 2010 PoC Published
- Jul 30, 2010 PoC Published
- May 29, 2018 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
References
- http://seer.support.veritas.com/docs/273419.htm url
- http://www.frsirt.com/exploits/20050111.101_BXEC.cpp.php url
- 11974 vdb
- http://seer.support.veritas.com/docs/273850.htm url
- VU#907729 third-party-advisory
- http://seer.support.veritas.com/docs/273422.htm url
- 13495 third-party-advisory
- netbackup-agent-browser-bo(18506) vdb
- http://seer.support.veritas.com/docs/273420.htm url
- 20041216 Veritas Backup Exec Agent Browser Registration Request Buffer Overflow Vulnerability third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2004-1172 advisory
- http://secunia.com/advisories/13495 url