CVE-2017-6408: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbxexchange can occur when a local user connects to a socket before permissions are secured...

CVE-2017-6401: Improper Privilege Management

An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat...

PT-2017-17045

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 7.7.2 Veritas NetBackup Appliance versions prior to 2.7.2 Description A remote command execution issue was discovered, allowing privileged execution on the NetBackup Server and Client. This can occur on the...

PT-2017-17041

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 8.0 and earlier Veritas NetBackup Appliance versions 3.0 and earlier Description A denial of service issue was discovered, which can affect the NetBackup server. Recommendations For Veritas NetBackup versions 8.0 and...

PT-2017-17040

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 8.0 Veritas NetBackup Appliance versions prior to 3.0 Description An issue in Veritas NetBackup and NetBackup Appliance allows local arbitrary command execution when using bpcd and bpnbat. Recommendations Fo...

PT-2017-3515

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 7.7.2 Veritas NetBackup Appliance versions prior to 2.7.2 Description The issue is related to privilege separation errors in Veritas NetBackup and Veritas NetBackup Appliance. It allows an attacker to execut...

CVE-2016-7399

scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...

CVE-2016-7399

scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...

CVE-2016-7399: Improper Neutralization of Special Elements used in a Command

scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...

Veritas NetBackup Appliance Arbitrary Command Execution Vulnerability

Veritas NetBackup simplifies both the deployment and maintenance of data protection environments with a turnkey solution that is ideal for data centers, remote offices and virtual environments. A remote arbitrary command execution vulnerability exists in the Veritas NetBackup Appliance. An attack...

Veritas NetBackup Appliance Web Console Detection

Binary data veritasnetbackupappliancewebconsoledetect.nbin...

Veritas NetBackup Appliance 2.6.0.x / 2.6.1.x / 2.7.x RCE (VTS16-002)

According to its self-reported version, the remote Veritas NetBackup Appliance is 2.6.0.x equal or prior to 2.6.0.4, 2.6.1.x equal or prior to 2.6.1.2, or 2.7.x equal or prior to 2.7.3. It is, therefore, affected by an unspecified flaw that allows an unauthenticated, remote attacker to execute...

PT-2016-3227

Name of the Vulnerable Software and Affected Versions Veritas NetBackup Appliance versions 2.6.0.x through 2.6.0.4 Veritas NetBackup Appliance versions 2.6.1.x through 2.6.1.2 Veritas NetBackup Appliance versions 2.7.x through 2.7.3 Veritas NetBackup Appliance versions 3.0.x Description The issue...

Symantec Veritas NetBackup and NetBackup Appliance RPC Unauthorized Vulnerability

Symantec Veritas NetBackup NBU and NetBackup NBU Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability...

Symantec Veritas NetBackup and NetBackup Appliance bpcd Arbitrary Command Execution Vulnerability

Symantec Veritas NetBackup NBU and NetBackup Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability exis...

PT-2016-3718

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 7.x through 7.5.0.7 Veritas NetBackup versions 7.6.0.x through 7.6.0.4 Veritas NetBackup versions 7.6.1.x through 7.6.1.2 Veritas NetBackup versions 7.7.x before 7.7.2 NetBackup Appliance versions 2.5.4 and earlier...

CVE-2015-6551: Exposure of Sensitive Information to an Unauthorized Actor

Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for...

PT-2013-3271

Name of the Vulnerable Software and Affected Versions Symantec NetBackup appliance versions 2.0.x Description A directory traversal issue in the Management Console of the Symantec NetBackup appliance allows remote attackers to read arbitrary files. The exact vectors used for exploitation are not...