{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-11-19T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec Backup Exec for Windows Servers 11.0 (aka 11d) builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allow remote attackers to bypass authentication, and read or delete files, via unknown vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-07T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1021246", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1021246"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://seer.entsupport.symantec.com/docs/314528.htm"}, {"name": "32347", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/32347"}, {"name": "ADV-2008-3209", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/3209"}, {"name": "32810", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/32810"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://securityresponse.symantec.com/avcenter/security/Content/2008.11.19.html"}, {"name": "backupexec-remoteagent-security-bypass(46730)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46730"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-5407", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec Backup Exec for Windows Servers 11.0 (aka 11d) builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allow remote attackers to bypass authentication, and read or delete files, via unknown vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1021246", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1021246"}, {"name": "http://seer.entsupport.symantec.com/docs/314528.htm", "refsource": "CONFIRM", "url": "http://seer.entsupport.symantec.com/docs/314528.htm"}, {"name": "32347", "refsource": "BID", "url": "http://www.securityfocus.com/bid/32347"}, {"name": "ADV-2008-3209", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/3209"}, {"name": "32810", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/32810"}, {"name": "http://securityresponse.symantec.com/avcenter/security/Content/2008.11.19.html", "refsource": "CONFIRM", "url": "http://securityresponse.symantec.com/avcenter/security/Content/2008.11.19.html"}, {"name": "backupexec-remoteagent-security-bypass(46730)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46730"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-5407", "datePublished": "2008-12-09T11:00:00", "dateReserved": "2008-12-08T00:00:00", "dateUpdated": "2017-08-07T12:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:symantec:backup_exec_for_windows_server:11d:11.0.6235:*:*:*:*:*:*", "matchCriteriaId": "7BB204AD-5637-4408-858E-DBEB2EDAB292", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:backup_exec_for_windows_server:11d:11.0.7170:*:*:*:*:*:*", "matchCriteriaId": "90137D90-F420-45C7-9662-802D7EF61A89", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:backup_exec_for_windows_server:12.0:12.0.1364:*:*:*:*:*:*", "matchCriteriaId": "1CBEACF9-E444-4433-8587-09FE25CAF79E", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:backup_exec_for_windows_server:12.5:12.5.2213:*:*:*:*:*:*", "matchCriteriaId": "D878440D-2A5A-4E12-BE28-0BECA084E07A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec Backup Exec for Windows Servers 11.0 (aka 11d) builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allow remote attackers to bypass authentication, and read or delete files, via unknown vectors."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades sin especificar en el proceso de logon en Backup Exec remote-agent Symantec de Backup Exec para Servidores Windows v11.0 (tambi\u00e9n conocido como 11d) builds 6235 y 7170, v12.0 build 1364, y v12.5 build 2213, permite a atacantes remotos evitar la autenticaci\u00f3n y leer o eliminar archivos a trav\u00e9s de vectores desconocidos."}], "id": "CVE-2008-5407", "lastModified": "2017-08-08T01:33:18.360", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.4, "confidentialityImpact": "COMPLETE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 9.2, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-12-10T06:44:42.330", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/32810"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://securityresponse.symantec.com/avcenter/security/Content/2008.11.19.html"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://seer.entsupport.symantec.com/docs/314528.htm"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/32347"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1021246"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/3209"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46730"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}