← Vulnerability feed

Vulnerability record · CVE-2005-0772 · published 28 June 2005

CVE-2005-0772: Veritas backup exec null pointer dereference vulnerability

VVeritas · Backup Exec

VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL or (2) a request packet with an invalid (non-0) "Error Status" value, which triggers a null dereference.

7.5 CVSS 3.1 High EPSS 36% · top 1.6% CWE-476 · NULL pointer dereference
7.5CVSS 3.1 base score, v2 5.0
36%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL or (2) a request packet with an invalid (non-0) "Error Status" value, which triggers a null dereference.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/15789 Broken Link
http://securitytracker.com/id?1014273 Broken LinkThird Party AdvisoryVDB Entry
http://seer.support.veritas.com/docs/276533.htm Broken Link
http://seer.support.veritas.com/docs/277485.htm Broken Link
http://www.idefense.com/application/poi/display?id=270&type=vulnerabilities&flashstatus=true Broken LinkVendor Advisory
http://www.idefense.com/application/poi/display?id=271&type=vulnerabilities Broken Link
http://secunia.com/advisories/15789 Broken Link
http://securitytracker.com/id?1014273 Broken LinkThird Party AdvisoryVDB Entry
http://seer.support.veritas.com/docs/276533.htm Broken Link
http://seer.support.veritas.com/docs/277485.htm Broken Link
http://www.idefense.com/application/poi/display?id=270&type=vulnerabilities&flashstatus=true Broken LinkVendor Advisory
http://www.idefense.com/application/poi/display?id=271&type=vulnerabilities Broken Link

Track CVE-2005-0772 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-27877Veritas Backup Exec Agent improper authentication via legacy SHA schemeVeritas Backup Exec before 21.2 still supported a legacy SHA authentication scheme that should have been disabled. Because that scheme is weak, an un…KEVEPSS 65%analysed8.8CVE-2021-27878Veritas Backup Exec Agent SHA authentication bypass leading to command executionVeritas Backup Exec before 21.2 contains a flaw in the SHA authentication scheme used between client and Agent. An attacker can bypass authentication…KEVEPSS 24%analysed8.1CVE-2021-27876Veritas Backup Exec Agent authentication bypass enabling arbitrary file accessVeritas Backup Exec before 21.2 has a flaw in the SHA authentication scheme used between client and Agent. An attacker can bypass authentication and …KEVEPSS 14%analysed9.8CVE-2017-8895Veritas Backup Exec agents use-after-free allows remote code executionVeritas Backup Exec 2014, 15 and 16 contain a use-after-free flaw in multiple agents. An unauthenticated attacker can crash the agent or potentially …EPSS 71%analysed8.8CVE-2020-36167Veritas backup exec unrestricted file upload vulnerabilityAn issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517. On start-up, it …EPSS 0.46%7.8CVE-2024-33673Veritas backup exec improper access control vulnerabilityAn issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search …EPSS 0.16%7.1CVE-2024-33671Veritas backup exec vulnerabilityAn issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec Deduplication Multi-threaded Streaming Agent can be leverag…EPSS 0.17%6.2CVE-2026-21525Windows Remote Access Connection Manager null pointer dereference DoSWindows Remote Access Connection Manager contains a null pointer dereference (CWE-476) that lets an unauthorized attacker deny service locally. The f…KEVEPSS 4.8%analysed

Source: NIST National Vulnerability Database (record CVE-2005-0772), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.