CVE-2004-1389

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.

Affected products

Veritas NetBackup: 3.4.0, 3.4.1, 4.5.0, 5.0, 5.1

References

http://secunia.com/advisories/12901/
http://seer.support.veritas.com/docs/271727.htm
http://www.ciac.org/ciac/bulletins/p-020.shtml
http://www.kb.cert.org/vuls/id/685456
http://www.securityfocus.com/bid/11494
https://exchange.xforce.ibmcloud.com/vulnerabilities/17811
http://secunia.com/advisories/12901/
http://seer.support.veritas.com/docs/271727.htm
http://www.ciac.org/ciac/bulletins/p-020.shtml
http://www.kb.cert.org/vuls/id/685456
http://www.securityfocus.com/bid/11494
https://exchange.xforce.ibmcloud.com/vulnerabilities/17811

Get alerted when CVE-2004-1389 or the next vulnerability affects your stack