Search

Find a vulnerability

Search criteria

    7 vulnerabilities found for JP1/VERITAS NetBackup by Hitachi, Ltd

    JVNDB-2023-003335

    Vulnerability from jvndb - Published: 2023-09-06 15:35 - Updated:2023-09-06 15:35
    Summary
    Vulnerability in JP1/VERITAS
    Details
    A vulnerability (VTS23-011) exists in JP1/VERITAS.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-003335.html",
  "dc:date": "2023-09-06T15:35+09:00",
  "dcterms:issued": "2023-09-06T15:35+09:00",
  "dcterms:modified": "2023-09-06T15:35+09:00",
  "description": "A vulnerability (VTS23-011) exists in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-003335.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:netbackup",
      "@product": "Veritas NetBackup",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:identifier": "JVNDB-2023-003335",
  "sec:references": [
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-40256",
      "@id": "CVE-2023-40256",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-40256",
      "@id": "CVE-2023-40256",
      "@source": "NVD"
    }
  ],
  "title": "Vulnerability in JP1/VERITAS"
}

    JVNDB-2023-001492

    Vulnerability from jvndb - Published: 2023-04-12 15:01 - Updated:2023-04-12 15:01
    Severity
    7.1 (High) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
    Summary
    Vulnerability in JP1/VERITAS
    Details
    A vulnerability (VTS23-003) exists in JP1/VERITAS.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-001492.html",
  "dc:date": "2023-04-12T15:01+09:00",
  "dcterms:issued": "2023-04-12T15:01+09:00",
  "dcterms:modified": "2023-04-12T15:01+09:00",
  "description": "A vulnerability (VTS23-003) exists in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-001492.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:netbackup",
      "@product": "Veritas NetBackup",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "7.1",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2023-001492",
  "sec:references": {
    "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
    "@id": "CWE-noinfo",
    "@title": "No Mapping(CWE-noinfo)"
  },
  "title": "Vulnerability in JP1/VERITAS"
}

    JVNDB-2021-001014

    Vulnerability from jvndb - Published: 2021-02-01 16:49 - Updated:2021-02-01 16:49
    Summary
    Vulnerability in JP1/VERITAS
    Details
    A vulnerability exists in JP1/VERITAS.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-001014.html",
  "dc:date": "2021-02-01T16:49+09:00",
  "dcterms:issued": "2021-02-01T16:49+09:00",
  "dcterms:modified": "2021-02-01T16:49+09:00",
  "description": "A vulnerability exists in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-001014.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_backup_exec",
      "@product": "JP1/VERITAS Backup Exec",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:backup_exec",
      "@product": "Backup Exec",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:netbackup",
      "@product": "Veritas NetBackup",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:identifier": "JVNDB-2021-001014",
  "sec:references": {
    "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
    "@id": "CWE-noinfo",
    "@title": "No Mapping(CWE-noinfo)"
  },
  "title": "Vulnerability in JP1/VERITAS"
}

    JVNDB-2018-009328

    Vulnerability from jvndb - Published: 2018-11-15 17:16 - Updated:2018-11-20 18:16
    Severity
    9.8 (Critical) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Summary
    Multiple Vulnerabilities in JP1/VERITAS
    Details
    Multiple vulnerabilities have been found in JP1/VERITAS.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-009328.html",
  "dc:date": "2018-11-20T18:16+09:00",
  "dcterms:issued": "2018-11-15T17:16+09:00",
  "dcterms:modified": "2018-11-20T18:16+09:00",
  "description": "Multiple vulnerabilities have been found in JP1/VERITAS.",
  "link": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-009328.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:veritas:netbackup",
      "@product": "Veritas NetBackup",
      "@vendor": "Veritas Technologies LLC.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "10.0",
      "@severity": "High",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
      "@version": "2.0"
    },
    {
      "@score": "9.8",
      "@severity": "Critical",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2018-009328",
  "sec:references": {
    "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
    "@id": "CWE-noinfo",
    "@title": "No Mapping(CWE-noinfo)"
  },
  "title": "Multiple Vulnerabilities in JP1/VERITAS"
}

    JVNDB-2008-001895

    Vulnerability from jvndb - Published: 2008-12-01 11:10 - Updated:2008-12-01 11:10
    Severity
    N/A (UNKNOWN) - -
    Summary
    JP1/VERITAS NetBackup JAVA Administration GUI Privilege Escalation Vulnerability
    Details
    The JAVA Administration Graphical User Interface (GUI) in JP1/VERITAS NetBackup contains a privilege escalation vulnerability.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001895.html",
  "dc:date": "2008-12-01T11:10+09:00",
  "dcterms:issued": "2008-12-01T11:10+09:00",
  "dcterms:modified": "2008-12-01T11:10+09:00",
  "description": "The JAVA Administration Graphical User Interface (GUI) in JP1/VERITAS NetBackup contains a privilege escalation vulnerability.",
  "link": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001895.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_netbackup_enterprise_server",
      "@product": "Symantec Veritas NetBackup Enterprise Server",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_netbackup_server",
      "@product": "Symantec Veritas NetBackup Server",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "6.5",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2008-001895",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4339",
      "@id": "CVE-2008-4339",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-4339",
      "@id": "CVE-2008-4339",
      "@source": "NVD"
    },
    {
      "#text": "http://www.securityfocus.com/bid/31221",
      "@id": "31221",
      "@source": "BID"
    },
    {
      "#text": "http://www.securitytracker.com/id?1020928",
      "@id": "1020928",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001895.html",
      "@id": "JVNDB-2008-001895",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-264",
      "@title": "Permissions(CWE-264)"
    }
  ],
  "title": "JP1/VERITAS NetBackup JAVA Administration GUI Privilege Escalation Vulnerability"
}

    JVNDB-2008-001311

    Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-11-21 12:20
    Severity
    N/A (UNKNOWN) - -
    Summary
    Symantec Backup Exec for Windows Server ActiveX Control Multiple Buffer Overflow Vulnerabilities
    Details
    The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles long strings assigned to various properties listed below, which can be exploited to cause stack-based buffer overflows. _DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4 _DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2 _MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7 _MonthText8, _MonthText9, _MonthText10, _MonthText11
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001311.html",
  "dc:date": "2008-11-21T12:20+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-11-21T12:20+09:00",
  "description": "The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles long strings assigned to various properties listed below, which can be exploited to cause stack-based buffer overflows.\r\n_DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4\r\n_DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2\r\n_MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7\r\n_MonthText8, _MonthText9, _MonthText10, _MonthText11",
  "link": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001311.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_backup_exec",
      "@product": "JP1/VERITAS Backup Exec",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_backup_exec",
      "@product": "Symantec Backup Exec for Windows Servers",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "9.3",
    "@severity": "High",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2008-001311",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6016",
      "@id": "CVE-2007-6016",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-6016",
      "@id": "CVE-2007-6016",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/27885",
      "@id": "SA27885",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/26904",
      "@id": "26904",
      "@source": "BID"
    },
    {
      "#text": "http://securitytracker.com/id?1019524",
      "@id": "1019524",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://www.frsirt.com/english/advisories/2008/0718",
      "@id": "FrSIRT/ADV-2008-0718",
      "@source": "FRSIRT"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001311.html",
      "@id": "JVNDB-2008-001311",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-119",
      "@title": "Buffer Errors(CWE-119)"
    }
  ],
  "title": "Symantec Backup Exec for Windows Server ActiveX Control Multiple Buffer Overflow Vulnerabilities"
}

    JVNDB-2008-001312

    Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-11-21 12:20
    Severity
    N/A (UNKNOWN) - -
    Summary
    Symantec Backup Exec for Windows Server ActiveX Control Multiple Vulnerabilities
    Details
    The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles strings assigned to certain properties listed below, which can be exploited to cause a denial of service (DoS) or overwrite arbitrary files. _DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4 _DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2 _MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7 _MonthText8, _MonthText9, _MonthText10, _MonthText11
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001312.html",
  "dc:date": "2008-11-21T12:20+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-11-21T12:20+09:00",
  "description": "The PVATLCalendar.PVCalendar.1 (pvcalendar.ocx) ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server (BEWS), includes the insecure Save() method that mishandles strings assigned to certain properties listed below, which can be exploited to cause a denial of service (DoS) or overwrite arbitrary files.\r\n_DOWText0, _DOWText1, _DOWText2, _DOWText3, _DOWText4\r\n_DOWText5, _DOWText6, _MonthText0, _MonthText1, _MonthText2\r\n_MonthText3, _MonthText4, _MonthText5, _MonthText6, _MonthText7\r\n_MonthText8, _MonthText9, _MonthText10, _MonthText11",
  "link": "https://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-001312.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_backup_exec",
      "@product": "JP1/VERITAS Backup Exec",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hitachi:jp1_veritas_netbackup",
      "@product": "JP1/VERITAS NetBackup",
      "@vendor": "Hitachi, Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:symantec:veritas_backup_exec",
      "@product": "Symantec Backup Exec for Windows Servers",
      "@vendor": "Symantec Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "5.1",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2008-001312",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6017",
      "@id": "CVE-2007-6017",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-6017",
      "@id": "CVE-2007-6017",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/27885",
      "@id": "SA27885",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/28008",
      "@id": "28008",
      "@source": "BID"
    },
    {
      "#text": "http://securitytracker.com/id?1019525",
      "@id": "1019525",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://www.frsirt.com/english/advisories/2008/0718",
      "@id": "FrSIRT/ADV-2008-0718",
      "@source": "FRSIRT"
    },
    {
      "#text": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001312.html",
      "@id": "JVNDB-2008-001312",
      "@source": "JVNDB_Ja"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-20",
      "@title": "Improper Input Validation(CWE-20)"
    }
  ],
  "title": "Symantec Backup Exec for Windows Server ActiveX Control Multiple Vulnerabilities"
}