CVE-2005-2715
VERITAS NetBackup 4.5FP/4.5MP/5.0-6.0 - Remote Code Execution via Java UI Format String
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-2715. PoCs published by Kevin Finisterre.
AI-analyzed exploit summary This exploit targets a format string vulnerability in Veritas NetBackup on Windows systems, leveraging either PEB overwrites (Windows 2000/XP SP0/SP1) or SEH overwrites (Windows XP SP2) to achieve remote code execution. The payload includes shellcode designed to spawn a reverse shell.
Description
Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command.
Exploits (3)
This exploit targets a format string vulnerability in Veritas NetBackup on Windows systems, leveraging either PEB overwrites (Windows 2000/XP SP0/SP1) or SEH overwrites (Windows XP SP2) to achieve remote code execution. The payload includes shellcode designed to spawn a reverse shell.
This exploit targets a format string vulnerability in VERITAS NetBackup on OSX/ppc systems, leveraging a remote format string attack to execute a bind shell on port 5557. It uses a crafted payload to overwrite memory addresses and achieve remote code execution.
This exploit targets a format string vulnerability in VERITAS NetBackup on Linux/x86 systems. It leverages a remote code execution (RCE) via a crafted payload sent to port 13722, followed by a reverse shell connection to port 5570.