CVE-2017-6406

CVE-2017-6406 affects Veritas NetBackup (Before 7.7.2) and NetBackup Appliance (Before 2.7.2). It enables arbitrary privileged command execution via a whitelist directory escape using substrings like "../". The root cause is a directory traversal that can lead to privilege escalation with local a...

CVE-2017-6399

Veritas NetBackup (Server/Client) prior to 7.7.2 and NetBackup Appliance prior to 2.7.2/3.1.0 is affected by a Privileged remote command execution vulnerability. Multiple connected advisories (Veritas VTS17-003, CNVD/CVE-2017-6399) confirm an arbitrary/root-level command execution vector on the N...

CVE-2017-6404

Veritas NetBackup before 7.7 and NetBackup Appliance before 2.7 contain a vulnerability where world-writable log files can be destroyed or spoofed. This is documented in CVE-2017-6404 and reflected across multiple sources (NVD entry; Nessus plugin). The initial disclosures do not provide remediat...

CVE-2017-6405

Veritas NetBackup products (NetBackup 8.0 and earlier; NetBackup Appliance 3.0 and earlier) are affected by a DNS spoofing vulnerability due to hostname-based security. The connected documents confirm the issue but do not provide exploit details or remediation steps within the provided content.

CVE-2017-6403

CVE-2017-6403 affects Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. The vulnerability arises in NetBackup Cloud Storage Service which uses a hardcoded username and password. Public data lists CVSS v3.0 base score 9.8 (CRITICAL) with network access, no privileges required, and h...

CVE-2017-6400

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged command execution on NetBackup Server and Client can occur on the local system...

CVE-2017-6406: Undefined Security Weakness

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can occur...

CVE-2017-6404: Incorrect Default Permissions

An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7. There are world-writable log files, allowing destruction or spoofing of log data...

CVE-2017-6409: Missing Authentication for Critical Function

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Unauthenticated CORBA interfaces permit inappropriate access...

CVE-2017-6405: Authentication Bypass by Spoofing

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing...

CVE-2017-6400: Undefined Security Weakness

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged command execution on NetBackup Server and Client can occur on the local system...

CVE-2017-6402: Undefined Security Weakness

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Denial of service affecting NetBackup server can occur...

CVE-2017-6408: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbxexchange can occur when a local user connects to a socket before permissions are secured...

CVE-2017-6407: Undefined Security Weakness

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client on the server or a connected client can occur...

CVE-2017-6399: Undefined Security Weakness

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client on the server or a connected client can occur...

CVE-2017-6401: Improper Privilege Management

An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat...

PT-2017-17045

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 7.7.2 Veritas NetBackup Appliance versions prior to 2.7.2 Description A remote command execution issue was discovered, allowing privileged execution on the NetBackup Server and Client. This can occur on the...

PT-2017-17046

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 8.0 and earlier Veritas NetBackup Appliance versions 3.0 and earlier Description A local-privilege-escalation race condition issue exists. This issue occurs in pbx exchange when a local user connects to a socket befo...

PT-2017-17044

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 8.0 and earlier Veritas NetBackup Appliance versions 3.0 and earlier Description An issue was discovered that makes hostname-based security open to DNS spoofing. Recommendations For Veritas NetBackup versions 8.0 and...

PT-2017-17041

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 8.0 and earlier Veritas NetBackup Appliance versions 3.0 and earlier Description A denial of service issue was discovered, which can affect the NetBackup server. Recommendations For Veritas NetBackup versions 8.0 and...