CVE-2008-4339
First published: Tue Sep 30 2008(Updated: )
Unspecified vulnerability in the Java Administration GUI (jnbSA) in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to "bpjava* binaries."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec NetBackup | =6.0 | |
| Symantec Veritas NetBackup Enterprise Server | =6.0 | |
| Symantec NetBackup | =6.5 | |
| Symantec Veritas NetBackup Enterprise Server | =6.5 | |
| Symantec Veritas NetBackup Enterprise Server | =5.1 | |
| Symantec NetBackup | =5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-239908-1
- http://www.symantec.com/avcenter/security/Content/2008.09.24a.html
- http://www.securityfocus.com/bid/31221
- http://www.securitytracker.com/id?1020928
- http://www.vupen.com/english/advisories/2008/2672
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45386
Frequently Asked Questions
What is the severity of CVE-2008-4339?
CVE-2008-4339 is classified as a moderate severity vulnerability that allows remote authenticated users to gain elevated privileges.
How do I fix CVE-2008-4339?
To remediate CVE-2008-4339, ensure you apply the latest patches such as MP7 for versions 5.1 and 6.0, or 6.5.2 for version 6.5 of Symantec NetBackup.
What are the affected versions in CVE-2008-4339?
The affected versions in CVE-2008-4339 include Symantec NetBackup Server and Enterprise Server versions 5.1, 6.0, and 6.5 prior to specified maintenance packs.
Who can exploit CVE-2008-4339?
CVE-2008-4339 can be exploited by remote authenticated users who have access to the Java Administration GUI of the affected Symantec products.
What is the impact of CVE-2008-4339?
The impact of CVE-2008-4339 is that it may allow unauthorized privilege escalation, potentially compromising the integrity of the NetBackup system.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/remedy
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/symantec
- canonical/symantec netbackup
- version/symantec netbackup/6.0
- canonical/symantec veritas netbackup enterprise server
- version/symantec veritas netbackup enterprise server/6.0
- version/symantec netbackup/6.5
- version/symantec veritas netbackup enterprise server/6.5
- version/symantec veritas netbackup enterprise server/5.1
- version/symantec netbackup/5.1