CVE-2004-1389
Veritas NetBackup 3.4-4.5 and 5.0-5.1 - Remote Code Execution via bpjava-susvc Process
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-1389.
PoCs published by patrick, aushack, including Metasploit module exploits/multi/misc/veritas_netbackup_cmdexec.
AI-analyzed exploit summary This Metasploit module exploits CVE-2004-1389 in VERITAS NetBackup, allowing arbitrary command execution on an ephemeral port opened during administrator authentication. The exploit sends a crafted payload to execute commands as root or SYSTEM.
Description
Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.
Exploits (2)
This Metasploit module exploits CVE-2004-1389 in VERITAS NetBackup, allowing arbitrary command execution on an ephemeral port opened during administrator authentication. The exploit sends a crafted payload to execute commands as root or SYSTEM.
This Metasploit module exploits a remote command execution vulnerability in Veritas NetBackup by sending a crafted payload to an ephemeral port opened during administrator authentication. It allows arbitrary command execution as root or SYSTEM.