CVE-2004-1389

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.

CVSS v2.0

6.0 MEDIUMAV:L/AC:H/Au:S/C:C/I:C/A:C

EPSS

9.86% chance of exploitation in the next 30 days, 95th percentile

Published

2005-02-06

Updated

2024-08-08

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/veritas_netbackup_cmd…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/9941

References

• CVE Record
• NVD entry

Related

• CVE-2004-1388
• CVE-2004-1392
• CVE-2004-1385
• CVE-2004-1395
• CVE-2004-1384
• CVE-2004-1400