VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by ca…

published 2005-06-23 21 y ago modified 2026-06-16 4 mo ago also EUVD-2005-0772

cvss: 10.0; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 54.2%; EPSS 54.2% chance of exploitation in 30 days, percentile 99%
public exploits: 1; Metasploit

VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106.

Patch / fix

links 6

securitytracker.com/id?1014273 patch
seer.support.veritas.com/docs/277429.htm patch
kb.cert.org/vuls/id/584505 advisory
us-cert.gov/cas/techalerts/TA05-180A.html advisory
secunia.com/advisories/15789 advisory
seer.support.veritas.com/docs/276605.htm advisory

Exploit prediction

54.16% chance of exploitation in the next 30 days, higher than 99% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

Metasploit auxiliary/admin/backupexec/registry Veritas Backup Exec Server Registry Access metasploit auxiliary, normal rank

CVSS scores

assigned by	version	score	vector
NVD	2.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C

References

securitytracker.com /id?1014273
vdb-entry, patch
kb.cert.org /vuls/id/584505
third-party-advisory, patch, us-government-resource
us-cert.gov /cas/techalerts/TA05-180A.html
third-party-advisory, patch, us-government-resource
secunia.com /advisories/15789
third-party-advisory, patch, vendor-advisory
seer.support.veritas.com /docs/277429.htm
patch
seer.support.veritas.com /docs/276605.htm
patch, vendor-advisory
idefense.com /application/poi/display?id=269&type=vulnerabilities&flashstatus=true
third-party-advisory

Sources

CVE List CVE-2005-0771
NVD CVE-2005-0771

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary