PT-2017-17042

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 8.0 Veritas NetBackup Appliance versions prior to 3.0 Description An issue was discovered where the NetBackup Cloud Storage Service uses a hardcoded username and password. Recommendations For Veritas NetBack...

PT-2017-17047

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 8.0 and earlier Veritas NetBackup Appliance versions 3.0 and earlier Description An issue was discovered that allows unauthenticated access through CORBA interfaces, permitting inappropriate access. Recommendations F...

PT-2017-3516

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 7.7.2 Veritas NetBackup Appliance versions prior to 2.7.2 Description The issue is related to privilege separation errors in Veritas NetBackup and Veritas NetBackup Appliance, allowing for privileged remote...

CVE-2017-6403: Use of Hard-coded Credentials

An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. NetBackup Cloud Storage Service uses a hardcoded username and password...

PT-2017-17046

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 8.0 and earlier Veritas NetBackup Appliance versions 3.0 and earlier Description A local-privilege-escalation race condition issue exists. This issue occurs in pbx exchange when a local user connects to a socket befo...

CVE-2017-6401: Improper Privilege Management

An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat...

Veritas NetBackup DoS / Command Execution / Privilege Escalation / Traversal

Veritas NetBackup and NetBackup appliance - Multiple Vulnerabilities -------------------------------------------------------------------- Introduction ============ Multiple critical vulnerabilities were identified in Veritas NetBackup and NetBackup appliance. The vulnerabilities were discovered...

PT-2017-3514

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 7.7.2 Veritas NetBackup Appliance versions prior to 2.7.2 Description The issue allows for arbitrary privileged command execution using whitelist directory escape with "../" substrings. It is related to...

PT-2017-3515

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 7.7.2 Veritas NetBackup Appliance versions prior to 2.7.2 Description The issue is related to privilege separation errors in Veritas NetBackup and Veritas NetBackup Appliance. It allows an attacker to execut...

CVE-2016-7399

scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...

Code injection

scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...

CVE-2016-7399

scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...

CVE-2016-7399

scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...

CVE-2016-7399

CVE-2016-7399 affects Veritas NetBackup Appliance, with remote command execution via shell metacharacters in the hostName parameter to appliancews/getLicense. Versions affected include 2.6.0.x up to 2.6.0.4, 2.6.1.x up to 2.6.1.2, 2.7.x up to 2.7.3, and 3.0.x. The root cause is unsafely handled h...

CVE-2016-7399: Improper Neutralization of Special Elements used in a Command

scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...

Symantec NetBackup Security Bypass Vulnerability

Symantec NetBackup is the United States Symantec Symantec company a set of data backup and recovery software suite designed for business users. A security vulnerability exists in the NetApp plug-in in versions prior to Symantec NetBackup 2.0.1 due to the program's use of non-unique server...

CVE-2016-7171

NetApp Plug-in for Symantec NetBackup prior to version 2.0.1 makes use of a non-unique server certificate, making it vulnerable to impersonation...

CVE-2016-7171

NetApp Plug-in for Symantec NetBackup prior to version 2.0.1 makes use of a non-unique server certificate, making it vulnerable to impersonation...

Information disclosure

NetApp Plug-in for Symantec NetBackup prior to version 2.0.1 makes use of a non-unique server certificate, making it vulnerable to impersonation...

CVE-2016-7171

CVE-2016-7171 affects the NetApp Plug-in for Symantec NetBackup prior to version 2.0.1. The root cause is the use of a non-unique server certificate, which can allow an attacker to impersonate the service. The vulnerability is documented across multiple sources (including NVD and CNVD/CVE listing...