Check Point Advisories

Symantec Veritas Multiple Products Information Disclosure (CVE-2005-2611)

Vulnerability
Protection

Check Point Reference:	CPAI-2005-0379
Date Published:	2 Jun 2024
Severity:	High
Last Updated:	Sunday 02 June, 2024
Source:
Industry Reference:	CVE-2005-2611
Protection Provided by:	Security Gateway R81, R80, R77, R75
Who is Vulnerable?	Symantec Veritas Backup Exec netware_servers_9.0.4019 Symantec Veritas Backup Exec netware_servers_9.0.4170 Symantec Veritas Backup Exec netware_servers_9.0.4172 Symantec Veritas Backup Exec netware_servers_9.0.4174 Symantec Veritas Backup Exec netware_servers_9.0.4202 Symantec Veritas Backup Exec netware_servers_9.1.306 Symantec Veritas Backup Exec netware_servers_9.1.307 Symantec Veritas Backup Exec netware_servers_9.1.1067_.2 Symantec Veritas Backup Exec netware_servers_9.1.1067_.3 Symantec Veritas Backup Exec netware_servers_9.1.1127_.1 Symantec Veritas Backup Exec netware_servers_9.1.1151_.1 Symantec Veritas Backup Exec netware_servers_9.1.1152 Symantec Veritas Backup Exec netware_servers_9.1.1152_.4 Symantec Veritas Backup Exec netware_servers_9.1.1154 Symantec Veritas Backup Exec netware_servers_9.1.1156 Symantec Veritas Backup Exec windows_servers_8.6 Symantec Veritas Backup Exec windows_servers_9.0 Symantec Veritas Backup Exec windows_servers_9.0_rev._4367 Symantec Veritas Backup Exec windows_servers_9.0_rev._4367_sp1 Symantec Veritas Backup Exec windows_servers_9.0_rev._4454 Symantec Veritas Backup Exec windows_servers_9.0_rev._4454_sp1 Symantec Veritas Backup Exec windows_servers_9.1 Symantec Veritas Backup Exec windows_servers_9.1_rev._4691 Symantec Veritas Backup Exec windows_servers_9.1_rev._4691_sp2 Symantec Veritas Backup Exec windows_servers_10.0_rev._5484 Symantec Veritas Backup Exec windows_servers_10.0_rev._5484_sp1 Symantec Veritas Backup Exec windows_servers_10.0_rev._5520 Symantec Veritas backup exec remote agent netware_server Symantec Veritas backup exec remote agent unix_linux_server Symantec Veritas backup exec remote agent windows_server Symantec Veritas NetBackup netware_media_servers_4.5 Symantec Veritas NetBackup netware_media_servers_4.5_fp1 Symantec Veritas NetBackup netware_media_servers_4.5_fp2 Symantec Veritas NetBackup netware_media_servers_4.5_fp3 Symantec Veritas NetBackup netware_media_servers_4.5_fp4 Symantec Veritas NetBackup netware_media_servers_4.5_fp5 Symantec Veritas NetBackup netware_media_servers_4.5_fp6 Symantec Veritas NetBackup netware_media_servers_4.5_fp7 Symantec Veritas NetBackup netware_media_servers_4.5_fp8 Symantec Veritas NetBackup netware_media_servers_4.5_mp1 Symantec Veritas NetBackup netware_media_servers_4.5_mp2 Symantec Veritas NetBackup netware_media_servers_4.5_mp3 Symantec Veritas NetBackup netware_media_servers_4.5_mp4 Symantec Veritas NetBackup netware_media_servers_4.5_mp5 Symantec Veritas NetBackup netware_media_servers_4.5_mp6 Symantec Veritas NetBackup netware_media_servers_4.5_mp7 Symantec Veritas NetBackup netware_media_servers_4.5_mp8 Symantec Veritas NetBackup netware_media_servers_5.0 Symantec Veritas NetBackup netware_media_servers_5.0_mp1 Symantec Veritas NetBackup netware_media_servers_5.0_mp2 Symantec Veritas NetBackup netware_media_servers_5.0_mp3 Symantec Veritas NetBackup netware_media_servers_5.0_mp4 Symantec Veritas NetBackup netware_media_servers_5.0_mp5
Vulnerability Description	An information disclosure vulnerability exists in multiple Symantec Veritas products. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information.

Protection Overview

This protection detects attempts to exploit this vulnerability.

In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05, click on Protection tab and select the version of your choice.

Security Gateway R81 / R80 / R77 / R75

In the IPS tab, click Protections and find the Symantec Veritas Multiple Products Information Disclosure (CVE-2005-2611) protection using the Search tool and Edit the protection's settings.
Install policy on all Security Gateways.

This protection's log will contain the following information:

Attack Name: Security Products Enforcement Violation.
Attack Information: Symantec Veritas Multiple Products Information Disclosure (CVE-2005-2611)