CVE-2005-2715
Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command.
- Affected products
- Java, Veritas Netbackup Data/Business Center, Veritas Netbackup Enterprise/Server/Client
- Symantec Veritas Netbackup Data And Business Center
- = 4.5fp, 4.5mp
- Symantec Veritas Netbackup Enterprise Server Client
- = 5.0, 5.1, 6.0
- CVSS 2.0
- 10.0 HIGH
- EPSS
- 60.4% (99th percentile)
- NVD status
- Modified
- Published
- 2005-10-12
CVE-2005-2715 at NVD
8 known exploits for CVE-2005-2715
Proof-of-concept code and exploit modules indexed by Sploitus
VERITAS NetBackup Java Administration Console format string vulnerability
VERITAS NetBackup Java Administration Console format string vulnerability
VERITAS NetBackup Java Administration Console format string vulnerability
VERITAS NetBackup Java Administration Console format string vulnerability
Veritas NetBackup 6.0 (Linux) - 'bpjava-msvc' Remote Command Execution
Veritas NetBackup 6.0 (Windows x86) - 'bpjava-msvc' Remote Command Execution
Veritas NetBackup 6.0 (OSX) - 'bpjava-msvc' Remote Command Execution
Immunity Canvas: NETBACKUP_JAVAUI