GCVE - cpe:2.3:a:symantec:backup_exec:2010:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:backup_exec:2010:*:*:*:*:*:*:*

part: a version: 2010 update: *

Vendor	Symantec (`88d7b611-7ce9-5631-abc6-1312dc87ce23`)
Product	Backup Exec (`b98ff3c6-30e3-5572-958d-5b66a572f7fa`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4678`	vulnerable	2026-06-08 05:04:49.108166	Details available The NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote authenticated users to obtain sensitive host-version information via unspecified vectors. Published: 2013-08-04T20:00:00.000Z Updated: 2024-09-17T03:54:55.125Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 http://www.securityfocus.com/bid/61488	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4677`	vulnerable	2026-06-08 05:04:49.106461	Details available Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read and Everyone: Change) for backup data files, which allows local users to obtain sensitive information or modify the outcome of a restore via direct access to these files. Published: 2013-08-04T20:00:00.000Z Updated: 2024-08-06T16:52:26.943Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 http://osvdb.org/95939 http://www.securityfocus.com/bid/61487	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4575`	vulnerable	2026-06-08 05:04:48.299901	Details available Heap-based buffer overflow in the utility program in the Linux agent in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote attackers to cause a denial of service (agent crash) or possibly execute arbitrary code via unspecified vectors. Published: 2013-08-04T20:00:00.000Z Updated: 2024-08-06T16:45:15.191Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130801_00 http://osvdb.org/95938 http://www.securityfocus.com/bid/61485	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.