CVE-2005-2715
Last modified
CVE-2005-2715 is a vulnerability of currently unknown severity. Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command.. EPSS estimates a 60.36% chance of exploitation in the next 30 days.
Description
Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Symantec Veritas | Netbackup Data And Business Center | 4.5fp |
| Symantec Veritas | Netbackup Data And Business Center | 4.5mp |
| Symantec Veritas | Netbackup Enterprise Server Client | 5.0 |
| Symantec Veritas | Netbackup Enterprise Server Client | 5.1 |
| Symantec Veritas | Netbackup Enterprise Server Client | 6.0 |
References
- http://secunia.com/advisories/17181Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/495556Patch, US Government Resource
- http://www.securityfocus.com/bid/15079Exploit, Patch
- http://www.symantec.com/avcenter/security/Content/2005.10.12.htmlPatch, Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-05-001.htmlVendor Advisory
- http://secunia.com/advisories/17181Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/495556Patch, US Government Resource
- http://www.securityfocus.com/bid/15079Exploit, Patch
- http://www.symantec.com/avcenter/security/Content/2005.10.12.htmlPatch, Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-05-001.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-2715?
How severe is CVE-2005-2715?
How do I fix CVE-2005-2715?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-2709The sysctl functionality (sysctl.c) in Linux kernel before 2…
- CVE-2005-2710Format string vulnerability in Real HelixPlayer and RealPlay…
- CVE-2005-2711ISS BlackIce 3.6, as used in multiple products including Bla…
- CVE-2005-2712The LDAP server (nldap.exe) in IBM Lotus Domino before 7.0.1…
- CVE-2005-2713passwd in Directory Services in Mac OS X 10.3.x before 10.3.…
- CVE-2005-2714passwd in Directory Services in Mac OS X 10.3.x before 10.3.…
- CVE-2005-2716The event_pin_code_request function in the btsrv daemon (bts…
- CVE-2005-2717PHP remote file inclusion vulnerability in WebCalendar befor…
- CVE-2005-2718Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier a…
- CVE-2005-2719Ventrilo 2.1.2 through 2.3.0 allows remote attackers to caus…
- CVE-2005-2720Stack-based buffer overflow in the ACE archive decompression…
- CVE-2005-2721Multiple cross-site scripting (XSS) vulnerabilities in (1) i…
Are you affected by CVE-2005-2715?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
