The version of Veritas Backup Exec Remote Agent installed on the remote Windows host is 16.x prior to 21.2. It is, therefore, affected by multiple vulnerabilities, as follows:

- An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent   requires successful authentication, which is typically completed over a secure TLS communication. However,   due to a vulnerability in the SHA Authentication scheme, an attacker is able to gain unauthorized access and   complete the authentication process. Subsequently, the client can execute data management protocol commands   on the authenticated connection. By using crafted input parameters in one of these commands, an attacker can   access an arbitrary file on the system using System privileges. (CVE-2021-27876)

- An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA   authentication is one of these. This authentication scheme is no longer used in current versions of the   product, but hadn't yet been disabled. An attacker could remotely exploit this scheme to gain unauthorized   access to an Agent and execute privileged commands. (CVE-2021-27877)

- An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent   requires successful authentication, which is typically completed over a secure TLS communication. However,   due to a vulnerability in the SHA Authentication scheme, an attacker is able to gain unauthorized access and   complete the authentication process. Subsequently, the client can execute data management protocol commands   on the authenticated connection. The attacker could use one of these commands to execute an arbitrary   command on the system using system privileges. (CVE-2021-27878)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Veritas Backup Exec Remote Agent 16.x < 21.2 Multiple Vulnerabilities (VTS21-001)

critical Nessus Plugin ID 146990

Version 1.8