{"id":"CVE-2004-1389","aliases":["EUVD-2004-1386","GHSA-vg8m-xxh3-hmfr"],"status":"published","title":"Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup...","description":"Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.","severity":{"version":"2.0","score":6,"vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.09863,"percentile":0.95598,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:07:36Z","exploits":[{"source":"exploitdb","id":"EDB-9941","title":"Veritas NetBackup - Remote Command Execution (Metasploit)","type":"remote","platform":"multiple","date":"2004-10-21","verified":true,"url":"https://www.exploit-db.com/exploits/9941"},{"source":"metasploit","id":"exploit/multi/misc/veritas_netbackup_cmdexec","title":"VERITAS NetBackup Remote Command Execution","type":"exploit","platform":"Linux,Unix,Windows","date":"2004-10-21","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/misc/veritas_netbackup_cmdexec"}],"products":[{"vendor":"veritas","product":"netbackup"}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/p-020.shtml","tags":["third-party-advisory","government-resource","x_refsource_CIAC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17811","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/12901/","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/685456","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://seer.support.veritas.com/docs/271727.htm","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11494","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1389"},{"url":"http://secunia.com/advisories/12901"},{"url":"https://github.com/advisories/GHSA-vg8m-xxh3-hmfr"}],"sources":{"cve":[{"id":"CVE-2004-1389","description":"Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.","status":"published","published":"2005-02-06T05:00:00Z","modified":"2024-08-08T00:46:12.557Z","updated_at":"2026-11-02T14:34:54.063504Z"}],"euvd":[{"id":"EUVD-2004-1386","description":"Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.","status":"published","published":"2005-02-06T05:00:00Z","modified":"2024-08-08T00:46:12Z","updated_at":"2026-11-03T01:15:15.165388Z"}],"ghsa":[{"id":"GHSA-vg8m-xxh3-hmfr","title":"Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup...","description":"Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.","status":"published","published":"2022-04-29T02:59:30Z","modified":"2025-04-03T04:04:12Z","updated_at":"2026-11-02T15:00:40.1727Z"}],"nvd":[{"id":"CVE-2004-1389","description":"Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:07:36.537Z","cvss":[{"version":"2.0","score":6,"vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:51.985436Z"}]}}