Search criteria

4 vulnerabilities found for JP1/VERITAS Backup Exec by Hitachi, Ltd

JVNDB-2021-001344

Vulnerability from jvndb - Published: 2021-04-13 16:42 - Updated:2021-04-13 16:42
Summary
Vulnerability in JP1/VERITAS
Details
A vulnerability exists in JP1/VERITAS.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-001344.html",
  "dc:date": "2021-04-13T16:42+09:00",
  "dcterms:issued": "2021-04-13T16:42+09:00",
  "dcterms:modified": "2021-04-13T16:42+09:00",
  "description": "A vulnerability exists in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-001344.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_backup_exec",
      "@product": "JP1/VERITAS Backup Exec",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:backup_exec",
      "@product": "Backup Exec",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:identifier": "JVNDB-2021-001344",
  "sec:references": {
    "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
    "@id": "CWE-noinfo",
    "@title": "No Mapping(CWE-noinfo)"
  },
  "title": "Vulnerability in JP1/VERITAS"
}

JVNDB-2021-001014

Vulnerability from jvndb - Published: 2021-02-01 16:49 - Updated:2021-02-01 16:49
Summary
Vulnerability in JP1/VERITAS
Details
A vulnerability exists in JP1/VERITAS.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-001014.html",
  "dc:date": "2021-02-01T16:49+09:00",
  "dcterms:issued": "2021-02-01T16:49+09:00",
  "dcterms:modified": "2021-02-01T16:49+09:00",
  "description": "A vulnerability exists in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-001014.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_backup_exec",
      "@product": "JP1/VERITAS Backup Exec",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:backup_exec",
      "@product": "Backup Exec",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:netbackup",
      "@product": "Veritas NetBackup",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:identifier": "JVNDB-2021-001014",
  "sec:references": {
    "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
    "@id": "CWE-noinfo",
    "@title": "No Mapping(CWE-noinfo)"
  },
  "title": "Vulnerability in JP1/VERITAS"
}

JVNDB-2008-001312

Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-11-21 12:20
Severity ?
() - -
Summary
Symantec Backup Exec for Windows Server ActiveX Control Multiple Vulnerabilities
Details
The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles strings assigned to certain properties listed below, which can be exploited to cause a denial of service (DoS) or overwrite arbitrary files. _DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4 _DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2 _MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7 _MonthText8, _MonthText9, _MonthText10, _MonthText11
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001312.html",
  "dc:date": "2008-11-21T12:20+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-11-21T12:20+09:00",
  "description": "The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles strings assigned to certain properties listed below, which can be exploited to cause a denial of service (DoS) or overwrite arbitrary files.\r\n_DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4\r\n_DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2\r\n_MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7\r\n_MonthText8, _MonthText9, _MonthText10, _MonthText11",
  "link": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001312.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_backup_exec",
      "@product": "JP1/VERITAS Backup Exec",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_backup_exec",
      "@product": "Symantec Backup Exec for Windows Servers",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "5.1",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2008-001312",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6017",
      "@id": "CVE-2007-6017",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-6017",
      "@id": "CVE-2007-6017",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/27885",
      "@id": "SA27885",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/28008",
      "@id": "28008",
      "@source": "BID"
    },
    {
      "#text": "http://securitytracker.com/id?1019525",
      "@id": "1019525",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://www.frsirt.com/english/advisories/2008/0718",
      "@id": "FrSIRT/ADV-2008-0718",
      "@source": "FRSIRT"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001312.html",
      "@id": "JVNDB-2008-001312",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-20",
      "@title": "Improper Input Validation(CWE-20)"
    }
  ],
  "title": "Symantec Backup Exec for Windows Server ActiveX Control Multiple Vulnerabilities"
}

JVNDB-2008-001311

Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-11-21 12:20
Severity ?
() - -
Summary
Symantec Backup Exec for Windows Server ActiveX Control Multiple Buffer Overflow Vulnerabilities
Details
The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles long strings assigned to various properties listed below, which can be exploited to cause stack-based buffer overflows. _DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4 _DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2 _MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7 _MonthText8, _MonthText9, _MonthText10, _MonthText11
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001311.html",
  "dc:date": "2008-11-21T12:20+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-11-21T12:20+09:00",
  "description": "The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles long strings assigned to various properties listed below, which can be exploited to cause stack-based buffer overflows.\r\n_DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4\r\n_DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2\r\n_MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7\r\n_MonthText8, _MonthText9, _MonthText10, _MonthText11",
  "link": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001311.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_backup_exec",
      "@product": "JP1/VERITAS Backup Exec",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_backup_exec",
      "@product": "Symantec Backup Exec for Windows Servers",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "9.3",
    "@severity": "High",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2008-001311",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6016",
      "@id": "CVE-2007-6016",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-6016",
      "@id": "CVE-2007-6016",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/27885",
      "@id": "SA27885",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/26904",
      "@id": "26904",
      "@source": "BID"
    },
    {
      "#text": "http://securitytracker.com/id?1019524",
      "@id": "1019524",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://www.frsirt.com/english/advisories/2008/0718",
      "@id": "FrSIRT/ADV-2008-0718",
      "@source": "FRSIRT"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001311.html",
      "@id": "JVNDB-2008-001311",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-119",
      "@title": "Buffer Errors(CWE-119)"
    }
  ],
  "title": "Symantec Backup Exec for Windows Server ActiveX Control Multiple Buffer Overflow Vulnerabilities"
}