{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2004-10-21T00:00:00", "descriptions": [{"lang": "en", "value": "Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "P-020", "tags": ["third-party-advisory", "government-resource", "x_refsource_CIAC"], "url": "http://www.ciac.org/ciac/bulletins/p-020.shtml"}, {"name": "nebackup-bpjavasusvc-gain-privileges(17811)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17811"}, {"name": "12901", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/12901/"}, {"name": "VU#685456", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/685456"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://seer.support.veritas.com/docs/271727.htm"}, {"name": "11494", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/11494"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2004-1389", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "P-020", "refsource": "CIAC", "url": "http://www.ciac.org/ciac/bulletins/p-020.shtml"}, {"name": "nebackup-bpjavasusvc-gain-privileges(17811)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17811"}, {"name": "12901", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/12901/"}, {"name": "VU#685456", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/685456"}, {"name": "http://seer.support.veritas.com/docs/271727.htm", "refsource": "CONFIRM", "url": "http://seer.support.veritas.com/docs/271727.htm"}, {"name": "11494", "refsource": "BID", "url": "http://www.securityfocus.com/bid/11494"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2004-1389", "datePublished": "2005-02-06T05:00:00", "dateReserved": "2005-01-31T00:00:00", "dateUpdated": "2017-07-10T14:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:veritas:netbackup:3.4.0:*:businessserver:*:*:*:*:*", "matchCriteriaId": "B0A9F84C-E5EF-441B-89A2-FAA8D4968681", "vulnerable": true}, {"criteria": "cpe:2.3:a:veritas:netbackup:3.4.0:*:datacenter:*:*:*:*:*", "matchCriteriaId": "B8967ED7-3FE2-4F38-AA20-FCEC0C3D2CA4", "vulnerable": true}, {"criteria": "cpe:2.3:a:veritas:netbackup:3.4.1:*:businessserver:*:*:*:*:*", "matchCriteriaId": "BACC4230-D744-49CE-BAB8-7D3D11877B81", "vulnerable": true}, {"criteria": "cpe:2.3:a:veritas:netbackup:3.4.1:*:datacenter:*:*:*:*:*", "matchCriteriaId": "6EC2AABD-38A2-4BC4-AD91-8205808CD302", "vulnerable": true}, {"criteria": "cpe:2.3:a:veritas:netbackup:4.5.0:*:businessserver:*:*:*:*:*", "matchCriteriaId": "E5CD1A9D-8EC4-4435-A266-46EB53C0C81F", "vulnerable": true}, {"criteria": "cpe:2.3:a:veritas:netbackup:4.5.0:*:datacenter:*:*:*:*:*", "matchCriteriaId": "DDB99533-907E-48FD-85F5-495263CE59F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:veritas:netbackup:5.0:*:server:*:*:*:*:*", "matchCriteriaId": "790282C3-9148-4D78-95ED-058D2166EB92", "vulnerable": true}, {"criteria": "cpe:2.3:a:veritas:netbackup:5.1:*:enterprise_server:*:*:*:*:*", "matchCriteriaId": "D6AD552C-8462-4B56-865C-7858A1892E58", "vulnerable": true}, {"criteria": "cpe:2.3:a:veritas:netbackup:5.1:*:server:*:*:*:*:*", "matchCriteriaId": "F570650A-8E21-4F66-B4D2-447FBB8EA9D9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature."}], "id": "CVE-2004-1389", "lastModified": "2017-07-11T01:30:59.403", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:H/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 1.5, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2004-12-31T05:00:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/12901/"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://seer.support.veritas.com/docs/271727.htm"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ciac.org/ciac/bulletins/p-020.shtml"}, {"source": "cve@mitre.org", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/685456"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/11494"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17811"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}