PT-2004-2304 · Veritas · Netbackup Server+3

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1389

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer versions 3.4 through 4.5 Veritas NetBackup Administrative Assistant interface for DataCenter versions 3.4 through 4.5 Veritas NetBackup Administrative Assistant interface for Enterprise Server version 5.1 Veritas NetBackup Administrative Assistant interface for NetBackup Server versions 5.0 through 5.1

Description: The issue allows attackers to execute arbitrary commands via the bpjava-susvc process. This might be related to the call-back feature.

Recommendations: For NetBackup BusinesServer versions 3.4 through 4.5, consider disabling the call-back feature until a fix is available. For DataCenter versions 3.4 through 4.5, restrict access to the bpjava-susvc process to minimize the risk of exploitation. For Enterprise Server version 5.1, avoid using the bpjava-susvc process in the Administrative Assistant interface until the issue is resolved. For NetBackup Server versions 5.0 through 5.1, consider temporarily disabling the bpjava-susvc process as a mitigation measure.

Exploit

Fix

Related Identifiers

CVE-2004-1389

Affected Products

Datacenter

Enterprise Server

Netbackup Businesserver

Netbackup Server

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/veritas_netbackup_cmdexec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/9941 · Exploit
• http://seer.support.veritas.com/docs/271727.htm · Vendor Advisory
• http://secunia.com/advisories/12901 · Vendor Advisory
• http://kb.cert.org/vuls/id/685456 · Patch
• http://ciac.org/ciac/bulletins/p-020.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1389 · Security Note
• http://securityfocus.com/bid/11494 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17811 · Note