Vulnerability in Symantec Veritas Netbackup Data And Business Center
CVE-2005-2715
Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command.
EPSS: 0.604 (99.1th percentile) — read the EPSS interpretation.
Affected products
- Symantec_veritas Netbackup_data_and_business_center — versions 4.5fp, 4.5mp
- Symantec_veritas Netbackup_enterprise_server_client — versions 5.0, 5.1, 6.0
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_SUNALERT)