vulnwire
6.0med

CVE-2004-13891 exploit

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCent…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
6.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
9.9%
percentile 96%
Public exploits
1
Exploit-DB

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.

Exploit prediction (EPSS)

9.86% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

Exploits and detections

  • EDB-9941 Veritas NetBackup - Remote Command Execution (Metasploit) · remote · 2004-10-21

CVSS scores

Assigned byVersionScoreVector
NVD2.06.0AV:L/AC:H/Au:S/C:C/I:C/A:C

References

  • ciac.org /ciac/bulletins/p-020.shtml · third-party-advisory, government-resource, x_refsource_CIAC, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17811 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /advisories/12901/ · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • kb.cert.org /vuls/id/685456 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • seer.support.veritas.com /docs/271727.htm · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/11494 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.