CVE-2016-7399

scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...

CVE-2016-7399

CVE-2016-7399 affects Veritas NetBackup Appliance, with remote command execution via shell metacharacters in the hostName parameter to appliancews/getLicense. Versions affected include 2.6.0.x up to 2.6.0.4, 2.6.1.x up to 2.6.1.2, 2.7.x up to 2.7.3, and 3.0.x. The root cause is unsafely handled h...

Veritas NetBackup Appliance 2.6.0.x / 2.6.1.x / 2.7.x RCE (VTS16-002)

According to its self-reported version, the remote Veritas NetBackup Appliance is 2.6.0.x equal or prior to 2.6.0.4, 2.6.1.x equal or prior to 2.6.1.2, or 2.7.x equal or prior to 2.7.3. It is, therefore, affected by an unspecified flaw that allows an unauthenticated, remote attacker to execute...