Lucene search

[email protected]CVE-2008-4339

HistorySep 30, 2008 - 5:22 p.m.

CVE-2008-4339

2008-09-3017:22:09

CWE-264

[email protected]

web.nvd.nist.gov

cve-2008-4339

java administration gui

jnbsa

symantec veritas netbackup server

netbackup enterprise server

privilege escalation

bpjava* binaries

nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.3%

JSON

Unspecified vulnerability in the Java Administration GUI (jnbSA) in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to “bpjava* binaries.”

Affected configurations

NVD

Node

symantecnetbackup_enterprise_serverMatch5.1

symantecnetbackup_enterprise_serverMatch6.0

symantecnetbackup_enterprise_serverMatch6.5

symantecnetbackup_serverMatch5.1

symantecnetbackup_serverMatch6.0

symantecnetbackup_serverMatch6.5

CPENameOperatorVersion
symantec:netbackup_enterprise_serversymantec netbackup enterprise servereq5.1
symantec:netbackup_enterprise_serversymantec netbackup enterprise servereq6.0
symantec:netbackup_enterprise_serversymantec netbackup enterprise servereq6.5
symantec:netbackup_serversymantec netbackup servereq5.1
symantec:netbackup_serversymantec netbackup servereq6.0
symantec:netbackup_serversymantec netbackup servereq6.5

CPE	Name	Operator	Version
symantec:netbackup_enterprise_server	symantec netbackup enterprise server	eq	5.1
symantec:netbackup_enterprise_server	symantec netbackup enterprise server	eq	6.0
symantec:netbackup_enterprise_server	symantec netbackup enterprise server	eq	6.5
symantec:netbackup_server	symantec netbackup server	eq	5.1
symantec:netbackup_server	symantec netbackup server	eq	6.0
symantec:netbackup_server	symantec netbackup server	eq	6.5

References

sunsolve.sun.com/search/document.do?assetkey=1-26-239908-1

www.securityfocus.com/bid/31221

www.securitytracker.com/id?1020928

www.symantec.com/avcenter/security/Content/2008.09.24a.html

www.vupen.com/english/advisories/2008/2672

exchange.xforce.ibmcloud.com/vulnerabilities/45386

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.3%

JSON

Related for CVE-2008-4339

nessus7 nvd1 prion1 cvelist1