First published: Wed Oct 12 2005(Updated: )
Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Symantec Veritas Netbackup Enterprise Server Client | =5.0 | |
Symantec Veritas Netbackup Enterprise Server Client | =5.1 | |
Symantec Veritas Netbackup Data And Business Center | =4.5fp | |
Symantec Veritas Netbackup Enterprise Server Client | =6.0 | |
Symantec Veritas Netbackup Data And Business Center | =4.5mp |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-2715 has a high severity rating due to its potential for remote code execution.
To fix CVE-2005-2715, it is recommended to update the affected Symantec Veritas NetBackup software to the latest versions as specified by the vendor.
CVE-2005-2715 affects Symantec Veritas NetBackup Data and Business Center versions 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client versions 5.0, 5.1, and 6.0.
CVE-2005-2715 is classified as a format string vulnerability that can be exploited by remote attackers.
Yes, CVE-2005-2715 can be exploited by remote attackers without requiring authentication.