CVE-2016-7171

CVE-2016-7171 affects the NetApp Plug-in for Symantec NetBackup prior to version 2.0.1. The root cause is the use of a non-unique server certificate, which can allow an attacker to impersonate the service. The vulnerability is documented across multiple sources (including NVD and CNVD/CVE listing...

Veritas NetBackup Appliance Arbitrary Command Execution Vulnerability

Veritas NetBackup simplifies both the deployment and maintenance of data protection environments with a turnkey solution that is ideal for data centers, remote offices and virtual environments. A remote arbitrary command execution vulnerability exists in the Veritas NetBackup Appliance. An attack...

Veritas NetBackup Appliance Web Console Detection

Binary data veritasnetbackupappliancewebconsoledetect.nbin...

Veritas NetBackup Appliance 2.6.0.x / 2.6.1.x / 2.7.x RCE (VTS16-002)

According to its self-reported version, the remote Veritas NetBackup Appliance is 2.6.0.x equal or prior to 2.6.0.4, 2.6.1.x equal or prior to 2.6.1.2, or 2.7.x equal or prior to 2.7.3. It is, therefore, affected by an unspecified flaw that allows an unauthenticated, remote attacker to execute...

Veritas NetBackup Installed

Binary data veritasnetbackupinstalled.nbin...

Veritas NetBackup 7.x < 7.7.2 Multiple Vulnerabilities (VTS16-001)

The Veritas NetBackup installation on the remote Windows host is 7.x prior to version 7.7.2 or is missing a vendor supplied hotfix. It is, therefore, affected by multiple vulnerabilities : - A remote command execution vulnerability exists in the bpcd service due to a failure to properly sanitize...

Symantec Veritas NetBackup and NetBackup Appliance Weak Key Exchange Vulnerability

Symantec Veritas NetBackup NBU and NetBackup NBU Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability...

Symantec Veritas NetBackup and NetBackup Appliance bpcd Arbitrary Command Execution Vulnerability

Symantec Veritas NetBackup NBU and NetBackup Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability exis...

Symantec Veritas NetBackup and NetBackup Appliance RPC Unauthorized Vulnerability

Symantec Veritas NetBackup NBU and NetBackup NBU Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability...

CVE-2015-6552

The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attacker...

CVE-2015-6551

Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for...

Information disclosure

The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attacker...

CVE-2015-6550

bpcd in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary commands via crafted...

Input validation

bpcd in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary commands via crafted...

Code injection

Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for...

CVE-2015-6552

Veritas NetBackup 7.x (and NetBackup Appliance) is affected by CVE-2015-6552 due to a vulnerability in the management-services protocol that permits remote attackers to make arbitrary RPC calls via unspecified vectors. Affected versions include NetBackup 7.x up to 7.7.1.x and NetBackup Appliance ...

CVE-2015-6551

Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for...

CVE-2015-6551

Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4, and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4, expose an information-disclosure vulnerability due to not using TLS for administration-console traffic to the NBU server. This allows a remote attacker to sniff ke...

CVE-2015-6550

CVE-2015-6550 affects Veritas NetBackup: the bpcd service in NetBackup 7.x (including 7.5.0.7, 7.6.x, and 7.7.x before 7.7.2) and NetBackup Appliance up to 2.7.x is exploitable via crafted input to trigger remote command execution. Affected versions include 7.5.0.7, 7.6.0.x–7.6.0.4, 7.6.1.x–7.6.1...

CVE-2015-6552

The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attacker...