CVE-2004-1389 Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup....
MediumCVSS 6.0
EPSS 9.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| veritas netbackup | = 3.4.0 | No fix listed |
| veritas netbackup | = 3.4.1 | No fix listed |
| veritas netbackup | = 4.5.0 | No fix listed |
| veritas netbackup | = 5.0 | No fix listed |
| veritas netbackup | = 5.1 | No fix listed |
References
- 12901 third-party-advisory vendor-advisory
- seer.support.veritas.com patch vendor-advisory
- P-020 government-resource patch third-party-advisory vendor-advisory
- VU#685456 patch third-party-advisory us-government-resource
- 11494 vdb-entry
- nebackup-bpjavasusvc-gain-privileges(17811) vdb-entry