CVE-2005-2715: Symantec Veritas Netbackup Data And Business Center

High severity, CVSS 10.0. EPSS: 60.4% chance of exploitation in the next 30 days.

Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command.

Affected products

• Symantec Veritas Netbackup Data And Business Center: version 4.5fp only; version 4.5mp only
• Symantec Veritas Netbackup Enterprise Server Client: version 5.0 only; version 5.1 only; version 6.0 only

Published 2005-10-12. Last modified 2026-06-16.