Unscored severity · published Dec 31, 2004
CVE-2004-1389
Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise…
–
CVSS
9.9%
EPSS
No
On KEV
Description
Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.9% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
NetBackup · Veritas
3.4.0; 3.4.0; 3.4.1; 3.4.1; 4.5.0; 4.5.0; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1389
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1389
Vendor Advisory
http://secunia.com/advisories/12901/
Patch
http://seer.support.veritas.com/docs/271727.htm
Patch
http://www.ciac.org/ciac/bulletins/p-020.shtml
Patch
http://www.kb.cert.org/vuls/id/685456
www.securityfocus.com
http://www.securityfocus.com/bid/11494
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17811
More from NetBackup
9.8
CVE-2024-28222
In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and…
9.8
CVE-2022-42302
An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products
9.8
CVE-2022-42303
An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products
9.8
CVE-2022-42304
An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products
9.8
CVE-2022-42307
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products