Total vulnerabilities in the database
Symantec Backup Exec 11.0, 12.0, 12.5, 13.0, and 13.0 R2 does not validate identity information sent between the media server and the remote agent, which allows man-in-the-middle attackers to execute NDMP commands via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| symantec / backup_exec | 11.0 | 11.0.x |
| symantec / backup_exec | 13.0-r2 | 13.0-r2.x |
| symantec / backup_exec | 13.0 | 13.0.x |
| symantec / backup_exec | 12.0 | 12.0.x |
| symantec / backup_exec | 12.5 | 12.5.x |