CVE-2017-6402

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Denial of service affecting NetBackup server can occur...

CVE-2017-6405

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing...

CVE-2017-6403

An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. NetBackup Cloud Storage Service uses a hardcoded username and password...

CVE-2017-6401

An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat...

Race condition

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbxexchange can occur when a local user connects to a socket before permissions are secured...

CVE-2017-6399

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client on the server or a connected client can occur...

CVE-2017-6401

An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat...

CVE-2016-7399

scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...

CVE-2016-7399

scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...

Veritas NetBackup Appliance Arbitrary Command Execution Vulnerability

Veritas NetBackup simplifies both the deployment and maintenance of data protection environments with a turnkey solution that is ideal for data centers, remote offices and virtual environments. A remote arbitrary command execution vulnerability exists in the Veritas NetBackup Appliance. An attack...

Veritas NetBackup Appliance Web Console Detection

Binary data veritasnetbackupappliancewebconsoledetect.nbin...

Veritas NetBackup Appliance 2.6.0.x / 2.6.1.x / 2.7.x RCE (VTS16-002)

According to its self-reported version, the remote Veritas NetBackup Appliance is 2.6.0.x equal or prior to 2.6.0.4, 2.6.1.x equal or prior to 2.6.1.2, or 2.7.x equal or prior to 2.7.3. It is, therefore, affected by an unspecified flaw that allows an unauthenticated, remote attacker to execute...

Symantec Veritas NetBackup and NetBackup Appliance bpcd Arbitrary Command Execution Vulnerability

Symantec Veritas NetBackup NBU and NetBackup Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability exis...

Symantec Veritas NetBackup and NetBackup Appliance RPC Unauthorized Vulnerability

Symantec Veritas NetBackup NBU and NetBackup NBU Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability...