Code injection

2017-01-0421:59:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.5%

JSON

scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense.

CPENameOperatorVersion
netbackup_appliance_firmwareeq2.6.0.0
netbackup_appliance_firmwareeq2.6.0.1
netbackup_appliance_firmwareeq2.6.0.2
netbackup_appliance_firmwareeq2.6.0.3
netbackup_appliance_firmwareeq2.6.0.4
netbackup_appliance_firmwareeq2.6.1.0
netbackup_appliance_firmwareeq2.6.1.1
netbackup_appliance_firmwareeq2.6.1.2
netbackup_appliance_firmwareeq2.7.0.0
netbackup_appliance_firmwareeq2.7.1.0

Name	Operator	Version
netbackup_appliance_firmware	eq	2.6.0.0
netbackup_appliance_firmware	eq	2.6.0.1
netbackup_appliance_firmware	eq	2.6.0.2
netbackup_appliance_firmware	eq	2.6.0.3
netbackup_appliance_firmware	eq	2.6.0.4
netbackup_appliance_firmware	eq	2.6.1.0
netbackup_appliance_firmware	eq	2.6.1.1
netbackup_appliance_firmware	eq	2.6.1.2
netbackup_appliance_firmware	eq	2.7.0.0
netbackup_appliance_firmware	eq	2.7.1.0