{"api_version":"1","generated_at":"2026-07-23T04:30:25+00:00","cve":"CVE-2008-4339","urls":{"html":"https://cve.report/CVE-2008-4339","api":"https://cve.report/api/cve/CVE-2008-4339.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-4339","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-4339"},"summary":{"title":"CVE-2008-4339","description":"Unspecified vulnerability in the Java Administration GUI (jnbSA) in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to \"bpjava* binaries.\"","state":"PUBLISHED","assigner":"mitre","published_at":"2008-09-30 17:22:09","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.symantec.com/avcenter/security/Content/2008.09.24a.html","name":"http://www.symantec.com/avcenter/security/Content/2008.09.24a.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"404 Not Found","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239908-1","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239908-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45386","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45386","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/31221","name":"http://www.securityfocus.com/bid/31221","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Symantec Veritas NetBackup Java Administration GUI Remote Privilege Escalation Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id?1020928","name":"http://www.securitytracker.com/id?1020928","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Symantec Veritas NetBackup JAVA Administration GUI Bug Lets Remote Authenticated Users Gain Elevated Privileges - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/2672","name":"http://www.vupen.com/english/advisories/2008/2672","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail - OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4339","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4339","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"4339","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"netbackup_enterprise_server","cpe6":"5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4339","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"netbackup_enterprise_server","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4339","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"netbackup_enterprise_server","cpe6":"6.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4339","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"netbackup_server","cpe6":"5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4339","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"netbackup_server","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"4339","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"netbackup_server","cpe6":"6.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T10:08:35.174Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"239908","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239908-1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.symantec.com/avcenter/security/Content/2008.09.24a.html"},{"name":"31221","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/31221"},{"name":"1020928","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1020928"},{"name":"ADV-2008-2672","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/2672"},{"name":"veritas-netbackup-jnbsa-privilege-escalation(45386)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45386"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-09-24T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Java Administration GUI (jnbSA) in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to \"bpjava* binaries.\""}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"239908","tags":["vendor-advisory","x_refsource_SUNALERT"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239908-1"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.symantec.com/avcenter/security/Content/2008.09.24a.html"},{"name":"31221","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/31221"},{"name":"1020928","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1020928"},{"name":"ADV-2008-2672","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/2672"},{"name":"veritas-netbackup-jnbsa-privilege-escalation(45386)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45386"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-4339","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Java Administration GUI (jnbSA) in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to \"bpjava* binaries.\""}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"239908","refsource":"SUNALERT","url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239908-1"},{"name":"http://www.symantec.com/avcenter/security/Content/2008.09.24a.html","refsource":"CONFIRM","url":"http://www.symantec.com/avcenter/security/Content/2008.09.24a.html"},{"name":"31221","refsource":"BID","url":"http://www.securityfocus.com/bid/31221"},{"name":"1020928","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1020928"},{"name":"ADV-2008-2672","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/2672"},{"name":"veritas-netbackup-jnbsa-privilege-escalation(45386)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45386"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-4339","datePublished":"2008-09-30T17:00:00.000Z","dateReserved":"2008-09-30T00:00:00.000Z","dateUpdated":"2024-08-07T10:08:35.174Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-09-30 17:22:09","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:netbackup_enterprise_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"41EACE89-5A6D-44C6-8E58-F3773FA24F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:netbackup_enterprise_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"557DE286-5961-46B0-AB74-1FAB81214200"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:netbackup_enterprise_server:6.5:*:*:*:*:*:*:*","matchCriteriaId":"16280E59-273D-4A09-A7A0-24C102746715"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:netbackup_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"C6C3B5DE-1376-4079-B16D-2DF63BB1B7D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:netbackup_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"691FB20C-C2F7-4E04-9296-CDB3289FEA7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:netbackup_server:6.5:*:*:*:*:*:*:*","matchCriteriaId":"0A3134C1-5569-4161-8251-4B6055858977"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"4339","Ordinal":"1","Title":"CVE-2008-4339","CVE":"CVE-2008-4339","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"4339","Ordinal":"1","NoteData":"Unspecified vulnerability in the Java Administration GUI (jnbSA) in Symantec Veritas NetBackup Server and NetBackup Enterprise Server 5.1 before MP7, 6.0 before MP7, and 6.5 before 6.5.2 allows remote authenticated users to gain privileges via unknown attack vectors related to \"bpjava* binaries.\"","Type":"Description","Title":"CVE-2008-4339"},{"CveYear":"2008","CveId":"4339","Ordinal":"2","NoteData":"2008-09-30","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"4339","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}