peter bassill · operator
$ cve CVE-2005-2715 JSON

CVE-2005-2715 EXPLOIT

10.0
HIGH · CVSS 2.0 · EPSS 60.4% (pctl 99)

Patch early

A public exploit exists.

Description

Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command.

Scoring

CVSS10.0 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS60.36% — more likely to be exploited than 99% of all CVEs
On CISA KEVno
Public exploityes
Published2005-10-12
Last modified2026-06-16

Affected (2)

VendorProduct
symantec veritasnetbackup data and business center
symantec veritasnetbackup enterprise server client

Public exploits

SourceTitleDate
exploit-dbVeritas NetBackup 6.0 (Linux) - 'bpjava-msvc' Remote Command Execution2005-10-20
exploit-dbVeritas NetBackup 6.0 (Windows x86) - 'bpjava-msvc' Remote Command Execution2005-10-20
exploit-dbVeritas NetBackup 6.0 (OSX) - 'bpjava-msvc' Remote Command Execution2005-10-20

References

→ the Explorer  ·  watch your stack  ·  NVD