CVE-2017-6401

CVE-2017-6401 affects Veritas NetBackup (before 8.0) and NetBackup Appliance (before 3.0). The issue enables local arbitrary command execution when using the bpcd and bpnbat components. The connected documents corroborate the affected products and the local-execution vector but do not provide con...

CVE-2017-6401

An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat...

CVE-2017-6408

CVE-2017-6408 affects Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. The issue is a local-privilege-escalation race condition in the pbx_exchange component that can occur when a local user connects to a socket before permissions are secured. The impact is privilege esc...

CVE-2017-6406

CVE-2017-6406 affects Veritas NetBackup (Before 7.7.2) and NetBackup Appliance (Before 2.7.2). It enables arbitrary privileged command execution via a whitelist directory escape using substrings like "../". The root cause is a directory traversal that can lead to privilege escalation with local a...

CVE-2017-6399

Veritas NetBackup (Server/Client) prior to 7.7.2 and NetBackup Appliance prior to 2.7.2/3.1.0 is affected by a Privileged remote command execution vulnerability. Multiple connected advisories (Veritas VTS17-003, CNVD/CVE-2017-6399) confirm an arbitrary/root-level command execution vector on the N...

CVE-2017-6404

Veritas NetBackup before 7.7 and NetBackup Appliance before 2.7 contain a vulnerability where world-writable log files can be destroyed or spoofed. This is documented in CVE-2017-6404 and reflected across multiple sources (NVD entry; Nessus plugin). The initial disclosures do not provide remediat...

CVE-2017-6405

Veritas NetBackup products (NetBackup 8.0 and earlier; NetBackup Appliance 3.0 and earlier) are affected by a DNS spoofing vulnerability due to hostname-based security. The connected documents confirm the issue but do not provide exploit details or remediation steps within the provided content.

CVE-2017-6402

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Denial of service affecting NetBackup server can occur...

PT-2017-17044

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 8.0 and earlier Veritas NetBackup Appliance versions 3.0 and earlier Description An issue was discovered that makes hostname-based security open to DNS spoofing. Recommendations For Veritas NetBackup versions 8.0 and...

PT-2017-17041

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 8.0 and earlier Veritas NetBackup Appliance versions 3.0 and earlier Description A denial of service issue was discovered, which can affect the NetBackup server. Recommendations For Veritas NetBackup versions 8.0 and...

CVE-2017-6402: Undefined Security Weakness

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Denial of service affecting NetBackup server can occur...

CVE-2017-6409: Missing Authentication for Critical Function

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Unauthenticated CORBA interfaces permit inappropriate access...

CVE-2017-6404: Incorrect Default Permissions

An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7. There are world-writable log files, allowing destruction or spoofing of log data...

CVE-2017-6406: Undefined Security Weakness

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can occur...

CVE-2017-6405: Authentication Bypass by Spoofing

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing...

PT-2017-17046

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 8.0 and earlier Veritas NetBackup Appliance versions 3.0 and earlier Description A local-privilege-escalation race condition issue exists. This issue occurs in pbx exchange when a local user connects to a socket befo...

CVE-2017-6400: Undefined Security Weakness

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged command execution on NetBackup Server and Client can occur on the local system...

CVE-2017-6403: Use of Hard-coded Credentials

An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. NetBackup Cloud Storage Service uses a hardcoded username and password...

CVE-2017-6408: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbxexchange can occur when a local user connects to a socket before permissions are secured...

PT-2017-17043

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 7.7 Veritas NetBackup Appliance versions prior to 2.7 Description An issue was discovered that allows destruction or spoofing of log data due to world-writable log files. Recommendations For Veritas NetBacku...