1141 matches found
CVE-2017-15517: Exposure of Sensitive Information to an Unauthorized Actor
AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution...
CVE-2017-15517
CVE-2017-15517 affects the NetApp AltaVault OST Plug-in (versions prior to 1.2.2). The vulnerability enables a local attacker to obtain sensitive information via unspecified vectors, resulting in partial confidentiality impact (no integrity/availability impact stated). The fixed version is 1.2.2 ...
The vulnerability of NetBackup Appliance’s backup and recovery software lies in the lack of measures taken to sanitize input data. This allows attackers to execute arbitrary commands with root privileges.
The vulnerability of NetBackup Appliance’s backup and recovery software lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...
The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup, related to lack of access control, allows attackers to perform file writing in a privileged mode.
The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup is related to lack of access control. Exploiting this vulnerability allows a malicious actor to perform file writing in a privileged mode, using the “bprd” process...
The vulnerability of the software tools for backup and data restoration in NetBackup Appliance and NetBackup allows a malicious individual to execute arbitrary commands in a privileged mode. This vulnerability is related to deficiencies in access control.
The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup lies in the lack of access control mechanisms root/admin privileges. Exploiting this vulnerability allows a malicious actor to remotely copy any file and execute arbitrary commands with...
The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup, related to lack of access control, allows attackers to perform file writing in a privileged mode.
The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup is related to lack of access control. Exploiting this vulnerability allows a malicious actor to perform file writing in a privileged mode, using the “bprd” process...
Veritas NetBackup Appliance 2.7.x / 3.0.x Remote Command Execution (VTS17-005)
According to its self-reported version, the remote Veritas NetBackup Appliance is 2.7.x or 3.0.x, and may be missing a vendor-supplied security patch. It is, therefore, affected by a remote command execution vulnerability due to improper validation of user-supplied input. An unauthenticated, remo...
Veritas NetBackup 7.7.x / 8.0.x Multiple Vulnerabilities (VTS17-004)
The Veritas NetBackup application installed on the remote Windows host is 7.7.x or 8.0.x and may be missing a vendor-supplied security hotfix. It is, therefore, affected by multiple vulnerabilities : - A remote command execution vulnerability exists in the bprd process due to improper directory...
Veritas Netbackup Arbitrary Command Execution Vulnerability
Veritas NetBackup simultaneously simplifies the deployment and maintenance of data protection environments with a turnkey solution that is ideal for data centers, remote offices and virtual environments. A remote arbitrary command execution vulnerability exists in the Veritas NetBackup Appliance...
Unspecified Vulnerability in Symantec Veritas NetBackup and NetBackup Appliance
Symantec Veritas NetBackup NBU and NetBackup NBU Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability...
Unspecified Vulnerability in Symantec Veritas NetBackup and NetBackup Appliance (CNVD-2017-07088)
Symantec Veritas NetBackup NBU and NetBackup NBU Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability...
Symantec Veritas NetBackup Appliance Has Unspecified Vulnerability
The Symantec Veritas NetBackup NBU Appliance is an enterprise-class backup management appliance from Symantec USA. A security vulnerability exists in Symantec Veritas NBU Appliance version 3.0 and earlier. An attacker could exploit the vulnerability to execute arbitrary commands with root...
Unspecified Vulnerability in Symantec Veritas NetBackup and NetBackup Appliance (CNVD-2017-07089)
Symantec Veritas NetBackup NBU and NetBackup NBU Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability...
CVE-2017-8859
In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root...
CVE-2017-8857
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process...
Remote file inclusion
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' process...
Design/Logic Flaw
In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root...
Command injection
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process...
