Immunity Canvas: NETBACKUP_JAVAUI

Name| netbackupjavaui ---|--- CVE| CVE-2005-2715 Exploit Pack| CANVAS Description| VERITAS NetBackup Java User Interface Format String Notes| CVE Name: CVE-2005-2715 VENDOR: Symantec VersionsAffected: Repeatability: References: http://www.zerodayinitiative.com/advisories/ZDI-05-001.html CVE Url:...

CVE-2005-2715

Format string vulnerability in the Java user interface service bpjava-msvc daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMANDLOGONTOMSERVER command...

CVE-2005-2715

CVE-2005-2715 involves a format-string vulnerability in VERITAS NetBackup Java Authentication Service (bpjava-msvc) daemon. The flaw affects NetBackup components listed in the description (e.g., 4.5FP/4.5MP and 5.0–6.0 families) and allows remote code execution via the COMMAND_LOGON_TO_MSERVER co...

VERITAS NetBackup Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on vulnerable NetBackup installations. Authentication is not required to exploit this vulnerability. This specific flaw exists within the bpjava-msvc daemon due to incorrect handling of format string data passed through the...

VERITAS NetBackup Java Administration Console contains a format string vulnerability in "bpjava-msvc"

Overview The VERITAS NetBackup Java Administration Console contains a format string vulnerability, which may allow an unauthenticated, remote attacker to execute arbitrary code with root or SYSTEM privileges. Description The Java Administration Console is an alternative administrative interface f...

CVE-2005-2715: Undefined Security Weakness

Format string vulnerability in the Java user interface service bpjava-msvc daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMANDLOGONTOMSERVER command...

CVE-2005-2611

VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write...

CVE-2005-2611

VERITAS Backup Exec and NetBackup products are vulnerable to remote file access due to a logic flaw involving hard-coded, static authentication credentials used by the NDMP agent during authentication. Affected software includes Backup Exec for Windows Servers (versions 8.6 through 10.0), Backup ...

CVE-2005-2611: Undefined Security Weakness

VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write...

BID 14355, VERITAS NetBackup 5.1 Time Stamp Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Reference: BID 14355, http://www.securityfocus.com/bid/14355, Risk: Very Low to minimal Affected product: Veritas NetBackup minimal impact only This issue does NOT affect Veritas Backup Exec Symantec engineers have thoroughly reviewed the issue as...

Veritas NetBackup backup suite DoS (fake)

Crash with NULL-pointer reference on invalid timestamp value. Because error occures is child process it doesn't affects any functionality...

CVE-2005-2389

NDMP server in Veritas NetBackup 5.1 allows attackers to cause a denial of service via a CONFIG message with an out-of-range timestamp, which triggers a null dereference...

CVE-2005-2389

The CVE-2005-2389 entry concerns the NDMP server in Veritas NetBackup 5.1. Affected component: NetBackup NDMP server. Vulnerable condition: processing a CONFIG message with an out-of-range timestamp leads to a null dereference, causing denial of service (availability impact). No exploitation deta...

CVE-2005-2389

NDMP server in Veritas NetBackup 5.1 allows attackers to cause a denial of service via a CONFIG message with an out-of-range timestamp, which triggers a null dereference...

CVE-2005-2389: Undefined Security Weakness

NDMP server in Veritas NetBackup 5.1 allows attackers to cause a denial of service via a CONFIG message with an out-of-range timestamp, which triggers a null dereference...

[Full-disclosure] VERITAS NETBACKUP 5.1 'TIME_STAMP' VULNERABILITY

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Update: Contact as finally been ok thanx secfocus and hotfix probably coming soon. VERITAS NETBACKUP 5.1 'TIMESTAMP' VULNERABILITY Date: 07/2005 Risk: Low/Medium Soft: NetBackup 5.1 OS : All supported win32 Fix : coming soon I. VULNERABILITY NETBACKUP...

CVE-2004-1389

Summary: CVE-2004-1389 describes an unknown vulnerability in the Veritas NetBackup Administrative Assistant interfaces across multiple NetBackup products (BusinesServer 3.4/3.4.1/4.5, DataCenter 3.4/3.4.1/4.5, Enterprise Server 5.1, NetBackup Server 5.0/5.1) that allows arbitrary command executio...

CVE-2004-1389

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process,...

CVE-2004-1389: Undefined Security Weakness

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process,...

Veritas NetBackup "bpjava-susvc" process contains an input validation error

Overview Veritas NetBackup Administrative Assistant interface may allow users to execute arbitrary commands with elevated privileges. Description The Veritas NetBackup Administrative Assistant interface bpjava-susvc contains an input validation vulnerability. According to Veritas Alert 271727 :Wh...