Signature Detail
Short Name |
APP:VERITAS:NETBACKUP-FS |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Veritas NetBackup Format String |
Release Date |
2005/10/14 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Veritas NetBackup Format String
This signature detects an attempt to exploit a known format string vulnerability in Veritas NetBackup. A successful attack can allow an attacker to execute arbitrary code at an elevated privilege level.
Extended Description
NetBackup Java user interface is affected by a remote format-string vulnerability. An attacker can exploit this vulnerability by crafting a malicious request that contains format specifiers. A successful attack may crash the server or lead to arbitrary code execution. This may facilitate unauthorized access or privilege escalation with SYSTEM or superuser privileges.
Affected Products
- Veritas Software NetBackup Advanced Reporter 4.5.0
- Veritas Software NetBackup Advanced Reporter 4.5.0 FP1
- Veritas Software NetBackup Advanced Reporter 4.5.0 FP2
- Veritas Software NetBackup Advanced Reporter 4.5.0 FP3
- Veritas Software NetBackup Advanced Reporter 4.5.0 FP4
- Veritas Software NetBackup Advanced Reporter 4.5.0 MP1
- Veritas Software NetBackup Advanced Reporter 4.5.0 MP2
- Veritas Software NetBackup Advanced Reporter 4.5.0 MP3
- Veritas Software NetBackup Advanced Reporter 4.5.0 MP4
- Veritas Software NetBackup BusinesServer 3.4.0
- Veritas Software NetBackup BusinesServer 4.5.0
- Veritas Software NetBackup BusinesServer 4.5.0 FP
- Veritas Software NetBackup BusinesServer 4.5.0 MP
- Veritas Software NetBackup Client 5.0.0
- Veritas Software NetBackup Client 5.1.0
- Veritas Software NetBackup Client 6.0.0
- Veritas Software NetBackup DataCenter 3.4.0
- Veritas Software NetBackup DataCenter 4.5.0
- Veritas Software NetBackup DataCenter 4.5.0 FP
- Veritas Software NetBackup DataCenter 4.5.0 MP
- Veritas Software NetBackup DataCenter 5.0.0
- Veritas Software NetBackup Enterprise Server 5.0.0
- Veritas Software NetBackup Enterprise Server 5.1.0
- Veritas Software NetBackup Enterprise Server 6.0.0
- Veritas Software NetBackup for NetWare Media Servers 4.5.0
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 FP1
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 FP2
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 FP3
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 FP4
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 FP5
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 FP6
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 FP7
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 FP8
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 MP1
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 MP2
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 MP3
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 MP4
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 MP5
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 MP6
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 MP7
- Veritas Software NetBackup for NetWare Media Servers 4.5.0 MP8
- Veritas Software NetBackup for NetWare Media Servers 5.0.0
- Veritas Software NetBackup for NetWare Media Servers 5.0.0 MP1
- Veritas Software NetBackup for NetWare Media Servers 5.0.0 MP2
- Veritas Software NetBackup for NetWare Media Servers 5.0.0 MP3
- Veritas Software NetBackup for NetWare Media Servers 5.0.0 MP4
- Veritas Software NetBackup for NetWare Media Servers 5.0.0 MP5
- Veritas Software NetBackup for NetWare Media Servers 5.1.0
- Veritas Software NetBackup for NetWare Media Servers 5.1.0 MP1
- Veritas Software NetBackup for NetWare Media Servers 5.1.0 MP2
- Veritas Software NetBackup for NetWare Media Servers 5.1.0 MP3
- Veritas Software NetBackup Global Data Manager 4.5.0
- Veritas Software NetBackup Global Data Manager 4.5.0 FP1
- Veritas Software NetBackup Global Data Manager 4.5.0 FP2
- Veritas Software NetBackup Global Data Manager 4.5.0 FP3
- Veritas Software NetBackup Global Data Manager 4.5.0 FP4
- Veritas Software NetBackup Global Data Manager 4.5.0 MP1
- Veritas Software NetBackup Global Data Manager 4.5.0 MP2
- Veritas Software NetBackup Global Data Manager 4.5.0 MP3
- Veritas Software NetBackup Global Data Manager 4.5.0 MP4
- Veritas Software NetBackup Global Data Manager 5.0.0
- Veritas Software NetBackup Server 3.4.0
- Veritas Software NetBackup Server 5.0.0
- Veritas Software NetBackup Server 5.1.0
- Veritas Software NetBackup Server 6.0.0
References
- BugTraq: 15079
- CVE: CVE-2005-2715