NetBackup Appliance Privilege Escalation Command Execution

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup lies in the lack of access control mechanisms root/admin privileges. Exploiting this vulnerability allows a malicious actor to remotely copy any file and execute arbitrary commands with...

Unspecified Vulnerability in Symantec Veritas NetBackup and NetBackup Appliance

Symantec Veritas NetBackup NBU and NetBackup NBU Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability...

CVE-2017-8856

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution using the 'bprd' process...

CVE-2017-8857

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process...

CVE-2017-8858

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' process...

CVE-2017-8856

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution using the 'bprd' process...

CVE-2017-8857

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process...

CVE-2017-8858

CVE-2017-8858 affects Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. The issue is an unauthenticated, privileged remote file write via the bprd process. This is a remote, unauthenticated threat with high impact (CVE-2017-8858 is disclosed in multiple sources; no exploi...

CVE-2017-8858: Incorrect Permission Assignment for Critical Resource

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' process...

CVE-2017-8857: Incorrect Permission Assignment for Critical Resource

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process...

CVE-2017-8856: Incorrect Permission Assignment for Critical Resource

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution using the 'bprd' process...

PT-2017-18586

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 8.0 and earlier Veritas NetBackup Appliance versions 3.0 and earlier Description The issue allows for unauthenticated, arbitrary remote command execution. This is achieved through the 'bprd' process. Recommendations...

PT-2017-2905

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 8.0 and earlier Veritas NetBackup Appliance versions 3.0 and earlier Description The issue is related to insufficient access control, allowing unauthenticated file copy and arbitrary remote command execution. This ca...

PT-2017-2904

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 8.0 and earlier Veritas NetBackup Appliance versions 3.0 and earlier Description The issue is related to insufficient access control in the NetBackup and NetBackup Appliance software, allowing for unauthenticated...

CBI seeking Pakistan government's help in identifying members of a hacker group 'VERGIL'

The CBI will seek Pakistan government's help in identifying members of a hacker group 'VERGIL' operating from that country and was allegedly involved in defacing the official website of Bureau of Police Research and Development BPRD in 2010. Accepting a CBI plea, a Delhi court today issued a...