Lucene search

[email protected]CVE-2004-1389

HistoryFeb 06, 2005 - 5:00 a.m.

CVE-2004-1389

2005-02-0605:00:00

[email protected]

web.nvd.nist.gov

veritas

netbackup

administrative assistant

vulnerability

veritas netbackup

nvd

cve-2004-1389

bpjava-susvc

arbitrary commands

callback feature

6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:S/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.045 Low

EPSS

Percentile

92.5%

JSON

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.

Affected configurations

NVD

Node

veritasnetbackupMatch3.4.0businessserver

veritasnetbackupMatch3.4.0datacenter

veritasnetbackupMatch3.4.1businessserver

veritasnetbackupMatch3.4.1datacenter

veritasnetbackupMatch4.5.0businessserver

veritasnetbackupMatch4.5.0datacenter

veritasnetbackupMatch5.0server

veritasnetbackupMatch5.1enterprise_server

veritasnetbackupMatch5.1server

CPENameOperatorVersion
veritas:netbackupveritas netbackupeq3.4.0
veritas:netbackupveritas netbackupeq3.4.1
veritas:netbackupveritas netbackupeq4.5.0
veritas:netbackupveritas netbackupeq5.0
veritas:netbackupveritas netbackupeq5.1

CPE	Name	Operator	Version
veritas:netbackup	veritas netbackup	eq	3.4.0
veritas:netbackup	veritas netbackup	eq	3.4.1
veritas:netbackup	veritas netbackup	eq	4.5.0
veritas:netbackup	veritas netbackup	eq	5.0
veritas:netbackup	veritas netbackup	eq	5.1

References

secunia.com/advisories/12901/

seer.support.veritas.com/docs/271727.htm

www.ciac.org/ciac/bulletins/p-020.shtml

www.kb.cert.org/vuls/id/685456

www.securityfocus.com/bid/11494

exchange.xforce.ibmcloud.com/vulnerabilities/17811

6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:S/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.045 Low

EPSS

Percentile

92.5%

JSON

Related for CVE-2004-1389

cvelist1 packetstorm1 nvd1 exploitdb1