CVE-2005-2715
highpriority · attend · 71EPSS 0.604 · 99 %ileexploit · functionalEUUSEPSS · scored 2026-10-23
Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (3)
Public proof-of-concept and weaponised exploit code.
- EDB-1263Veritas NetBackup 6.0 (Linux) - 'bpjava-msvc' Remote Command Executionfunctional · exploit_db
- EDB-1264Veritas NetBackup 6.0 (Windows x86) - 'bpjava-msvc' Remote Command Executionfunctional · exploit_db
- EDB-1265Veritas NetBackup 6.0 (OSX) - 'bpjava-msvc' Remote Command Executionfunctional · exploit_db
affected products (6)
Products and version ranges known to be affected.
- symantec veritas netbackup data and business center= 4.5fpnvdUScpe:2.3:a:symantec_veritas:netbackup_data_and_business_center:*:*:*:*:*:*:*:*
- symantec veritas netbackup data and business center= 4.5mpnvdUScpe:2.3:a:symantec_veritas:netbackup_data_and_business_center:*:*:*:*:*:*:*:*
- symantec veritas netbackup enterprise server client= 5.0nvdUScpe:2.3:a:symantec_veritas:netbackup_enterprise_server_client:*:*:*:*:*:*:*:*
- symantec veritas netbackup enterprise server client= 5.1nvdUScpe:2.3:a:symantec_veritas:netbackup_enterprise_server_client:*:*:*:*:*:*:*:*
- symantec veritas netbackup enterprise server client= 6.0nvdUScpe:2.3:a:symantec_veritas:netbackup_enterprise_server_client:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (16)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/17181enisa_euvd
- http://securitytracker.com/id?1015028enisa_euvd
- http://seer.support.veritas.com/docs/279085.htmenisa_euvd
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102054-1enisa_euvd
- http://www.kb.cert.org/vuls/id/495556enisa_euvd
- http://www.securityfocus.com/bid/15079enisa_euvd
- http://www.symantec.com/avcenter/security/Content/2005.10.12.htmlenisa_euvd
- http://www.zerodayinitiative.com/advisories/ZDI-05-001.htmlenisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan