Search criteria

7 vulnerabilities found for JP1/VERITAS NetBackup by Hitachi, Ltd

JVNDB-2023-003335

Vulnerability from jvndb - Published: 2023-09-06 15:35 - Updated:2023-09-06 15:35
Summary
Vulnerability in JP1/VERITAS
Details
A vulnerability (VTS23-011) exists in JP1/VERITAS.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-003335.html",
  "dc:date": "2023-09-06T15:35+09:00",
  "dcterms:issued": "2023-09-06T15:35+09:00",
  "dcterms:modified": "2023-09-06T15:35+09:00",
  "description": "A vulnerability (VTS23-011) exists in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-003335.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:netbackup",
      "@product": "Veritas NetBackup",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:identifier": "JVNDB-2023-003335",
  "sec:references": [
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-40256",
      "@id": "CVE-2023-40256",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-40256",
      "@id": "CVE-2023-40256",
      "@source": "NVD"
    }
  ],
  "title": "Vulnerability in JP1/VERITAS"
}

JVNDB-2023-001492

Vulnerability from jvndb - Published: 2023-04-12 15:01 - Updated:2023-04-12 15:01
Severity ?
7.1 (High) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Summary
Vulnerability in JP1/VERITAS
Details
A vulnerability (VTS23-003) exists in JP1/VERITAS.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-001492.html",
  "dc:date": "2023-04-12T15:01+09:00",
  "dcterms:issued": "2023-04-12T15:01+09:00",
  "dcterms:modified": "2023-04-12T15:01+09:00",
  "description": "A vulnerability (VTS23-003) exists in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-001492.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:netbackup",
      "@product": "Veritas NetBackup",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "7.1",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2023-001492",
  "sec:references": {
    "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
    "@id": "CWE-noinfo",
    "@title": "No Mapping(CWE-noinfo)"
  },
  "title": "Vulnerability in JP1/VERITAS"
}

JVNDB-2021-001014

Vulnerability from jvndb - Published: 2021-02-01 16:49 - Updated:2021-02-01 16:49
Summary
Vulnerability in JP1/VERITAS
Details
A vulnerability exists in JP1/VERITAS.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-001014.html",
  "dc:date": "2021-02-01T16:49+09:00",
  "dcterms:issued": "2021-02-01T16:49+09:00",
  "dcterms:modified": "2021-02-01T16:49+09:00",
  "description": "A vulnerability exists in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-001014.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_backup_exec",
      "@product": "JP1/VERITAS Backup Exec",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:backup_exec",
      "@product": "Backup Exec",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:netbackup",
      "@product": "Veritas NetBackup",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:identifier": "JVNDB-2021-001014",
  "sec:references": {
    "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
    "@id": "CWE-noinfo",
    "@title": "No Mapping(CWE-noinfo)"
  },
  "title": "Vulnerability in JP1/VERITAS"
}

JVNDB-2018-009328

Vulnerability from jvndb - Published: 2018-11-15 17:16 - Updated:2018-11-20 18:16
Severity ?
9.8 (Critical) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Multiple Vulnerabilities in JP1/VERITAS
Details
Multiple vulnerabilities have been found in JP1/VERITAS.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-009328.html",
  "dc:date": "2018-11-20T18:16+09:00",
  "dcterms:issued": "2018-11-15T17:16+09:00",
  "dcterms:modified": "2018-11-20T18:16+09:00",
  "description": "Multiple vulnerabilities have been found in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-009328.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:netbackup",
      "@product": "Veritas NetBackup",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "10.0",
      "@severity": "High",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
      "@version": "2.0"
    },
    {
      "@score": "9.8",
      "@severity": "Critical",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2018-009328",
  "sec:references": {
    "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
    "@id": "CWE-noinfo",
    "@title": "No Mapping(CWE-noinfo)"
  },
  "title": "Multiple Vulnerabilities in JP1/VERITAS"
}

JVNDB-2008-001895

Vulnerability from jvndb - Published: 2008-12-01 11:10 - Updated:2008-12-01 11:10
Severity ?
() - -
Summary
JP1/VERITAS NetBackup JAVA Administration GUI Privilege Escalation Vulnerability
Details
The JAVA Administration Graphical User Interface (GUI) in JP1/VERITAS NetBackup contains a privilege escalation vulnerability.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001895.html",
  "dc:date": "2008-12-01T11:10+09:00",
  "dcterms:issued": "2008-12-01T11:10+09:00",
  "dcterms:modified": "2008-12-01T11:10+09:00",
  "description": "The JAVA Administration Graphical User Interface (GUI) in JP1/VERITAS NetBackup contains a privilege escalation vulnerability.",
  "link": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001895.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_netbackup_enterprise_server",
      "@product": "Symantec Veritas NetBackup Enterprise Server",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_netbackup_server",
      "@product": "Symantec Veritas NetBackup Server",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "6.5",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2008-001895",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4339",
      "@id": "CVE-2008-4339",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-4339",
      "@id": "CVE-2008-4339",
      "@source": "NVD"
    },
    {
      "#text": "http://www.securityfocus.com/bid/31221",
      "@id": "31221",
      "@source": "BID"
    },
    {
      "#text": "http://www.securitytracker.com/id?1020928",
      "@id": "1020928",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001895.html",
      "@id": "JVNDB-2008-001895",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-264",
      "@title": "Permissions(CWE-264)"
    }
  ],
  "title": "JP1/VERITAS NetBackup JAVA Administration GUI Privilege Escalation Vulnerability"
}

JVNDB-2008-001312

Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-11-21 12:20
Severity ?
() - -
Summary
Symantec Backup Exec for Windows Server ActiveX Control Multiple Vulnerabilities
Details
The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles strings assigned to certain properties listed below, which can be exploited to cause a denial of service (DoS) or overwrite arbitrary files. _DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4 _DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2 _MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7 _MonthText8, _MonthText9, _MonthText10, _MonthText11
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001312.html",
  "dc:date": "2008-11-21T12:20+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-11-21T12:20+09:00",
  "description": "The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles strings assigned to certain properties listed below, which can be exploited to cause a denial of service (DoS) or overwrite arbitrary files.\r\n_DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4\r\n_DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2\r\n_MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7\r\n_MonthText8, _MonthText9, _MonthText10, _MonthText11",
  "link": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001312.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_backup_exec",
      "@product": "JP1/VERITAS Backup Exec",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_backup_exec",
      "@product": "Symantec Backup Exec for Windows Servers",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "5.1",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2008-001312",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6017",
      "@id": "CVE-2007-6017",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-6017",
      "@id": "CVE-2007-6017",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/27885",
      "@id": "SA27885",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/28008",
      "@id": "28008",
      "@source": "BID"
    },
    {
      "#text": "http://securitytracker.com/id?1019525",
      "@id": "1019525",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://www.frsirt.com/english/advisories/2008/0718",
      "@id": "FrSIRT/ADV-2008-0718",
      "@source": "FRSIRT"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001312.html",
      "@id": "JVNDB-2008-001312",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-20",
      "@title": "Improper Input Validation(CWE-20)"
    }
  ],
  "title": "Symantec Backup Exec for Windows Server ActiveX Control Multiple Vulnerabilities"
}

JVNDB-2008-001311

Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-11-21 12:20
Severity ?
() - -
Summary
Symantec Backup Exec for Windows Server ActiveX Control Multiple Buffer Overflow Vulnerabilities
Details
The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles long strings assigned to various properties listed below, which can be exploited to cause stack-based buffer overflows. _DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4 _DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2 _MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7 _MonthText8, _MonthText9, _MonthText10, _MonthText11
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001311.html",
  "dc:date": "2008-11-21T12:20+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-11-21T12:20+09:00",
  "description": "The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles long strings assigned to various properties listed below, which can be exploited to cause stack-based buffer overflows.\r\n_DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4\r\n_DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2\r\n_MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7\r\n_MonthText8, _MonthText9, _MonthText10, _MonthText11",
  "link": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001311.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_backup_exec",
      "@product": "JP1/VERITAS Backup Exec",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_backup_exec",
      "@product": "Symantec Backup Exec for Windows Servers",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "9.3",
    "@severity": "High",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2008-001311",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6016",
      "@id": "CVE-2007-6016",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-6016",
      "@id": "CVE-2007-6016",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/27885",
      "@id": "SA27885",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/26904",
      "@id": "26904",
      "@source": "BID"
    },
    {
      "#text": "http://securitytracker.com/id?1019524",
      "@id": "1019524",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://www.frsirt.com/english/advisories/2008/0718",
      "@id": "FrSIRT/ADV-2008-0718",
      "@source": "FRSIRT"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001311.html",
      "@id": "JVNDB-2008-001311",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-119",
      "@title": "Buffer Errors(CWE-119)"
    }
  ],
  "title": "Symantec Backup Exec for Windows Server ActiveX Control Multiple Buffer Overflow Vulnerabilities"
}