CVE-2017-17417

🗓️ 08 Feb 2018 18:00:00Reported by zdiType

cve🔗 web.nvd.nist.gov👁 74 Views🌐 WEB

Remote code execution vulnerability in Quest NetVault Backup 11.3.0.12

Reporter	Title	Published	Views	Family All 14
0day.today	Quest NetVault Backup Server < 11.4.5 - SQL Injection / Remote Code Execution Vulnerability	22 Feb 201900:00	–	zdt
ATTACKERKB	CVE-2017-17417	8 Feb 201818:29	–	attackerkb
BDU FSTEC	The vulnerability of the NVBUPhaseStatus Acknowledge request handler in the software for NetVault Backup’s data archiving and restoration capabilities allows a attacker to execute arbitrary code.	4 Apr 201800:00	–	bdu_fstec
Circl	CVE-2017-17417	17 Jul 202414:31	–	circl
CNVD	Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37644)	20 Dec 201700:00	–	cnvd
Cvelist	CVE-2017-17417	8 Feb 201818:00	–	cvelist
Exploit DB	Quest NetVault Backup Server < 11.4.5 - Process Manager Service SQL Injection / Remote Code Execution	22 Feb 201900:00	–	exploitdb
exploitpack	Quest NetVault Backup Server 11.4.5 - Process Manager Service SQL Injection Remote Code Execution	22 Feb 201900:00	–	exploitpack
Tenable Nessus	Quest NetVault Backup Server < 11.4.5 Process Manager Service SQL Injection Remote Code Execution Vulnerability (ZDI-17-982)	14 Dec 201800:00	–	nessus
NVD	CVE-2017-17417	8 Feb 201818:29	–	nvd

NVD

Vulners

Node

quest netvault_backupMatch11.3.0.12

[
  {
    "product": "Quest NetVault Backup",
    "vendor": "Quest",
    "versions": [
      {
        "status": "affected",
        "version": "11.3.0.12"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/46446/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-17-982

Parameter	Position	Path	Description	CWE
where	request body	/query	SQL injection in NVBUPhaseStatus handling leading to remote code execution (CVE-2017-17417).	CWE-89

17 Jun 2026 01:10Current

9.7High risk

Vulners AI Score9.7

CVSS 27.5

CVSS 39.8

EPSS0.10001

CWE-89