Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netbackup | Veritas | 3.4.0 (including) | 3.4.0 (including) |
| Netbackup | Veritas | 3.4.1 (including) | 3.4.1 (including) |
| Netbackup | Veritas | 4.5.0 (including) | 4.5.0 (including) |
| Netbackup | Veritas | 5.0 (including) | 5.0 (including) |
| Netbackup | Veritas | 5.1 (including) | 5.1 (including) |
References
- http://secunia.com/advisories/12901/
- http://seer.support.veritas.com/docs/271727.htm
- http://www.ciac.org/ciac/bulletins/p-020.shtml
- http://www.kb.cert.org/vuls/id/685456
- http://www.securityfocus.com/bid/11494
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17811
- http://secunia.com/advisories/12901/
- http://seer.support.veritas.com/docs/271727.htm
- http://www.ciac.org/ciac/bulletins/p-020.shtml
- http://www.kb.cert.org/vuls/id/685456
- http://www.securityfocus.com/bid/11494
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17811