1143 matches found
PT-2017-17042
Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 8.0 Veritas NetBackup Appliance versions prior to 3.0 Description An issue was discovered where the NetBackup Cloud Storage Service uses a hardcoded username and password. Recommendations For Veritas NetBack...
PT-2017-3516
Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 7.7.2 Veritas NetBackup Appliance versions prior to 2.7.2 Description The issue is related to privilege separation errors in Veritas NetBackup and Veritas NetBackup Appliance, allowing for privileged remote...
PT-2017-17047
Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 8.0 and earlier Veritas NetBackup Appliance versions 3.0 and earlier Description An issue was discovered that allows unauthenticated access through CORBA interfaces, permitting inappropriate access. Recommendations F...
PT-2017-17045
Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 7.7.2 Veritas NetBackup Appliance versions prior to 2.7.2 Description A remote command execution issue was discovered, allowing privileged execution on the NetBackup Server and Client. This can occur on the...
CVE-2017-6407: Undefined Security Weakness
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client on the server or a connected client can occur...
CVE-2017-6401: Improper Privilege Management
An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat...
CVE-2017-6399: Undefined Security Weakness
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client on the server or a connected client can occur...
PT-2017-17040
Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 8.0 Veritas NetBackup Appliance versions prior to 3.0 Description An issue in Veritas NetBackup and NetBackup Appliance allows local arbitrary command execution when using bpcd and bpnbat. Recommendations Fo...
Veritas NetBackup DoS / Command Execution / Privilege Escalation / Traversal
Veritas NetBackup and NetBackup appliance - Multiple Vulnerabilities -------------------------------------------------------------------- Introduction ============ Multiple critical vulnerabilities were identified in Veritas NetBackup and NetBackup appliance. The vulnerabilities were discovered...
PT-2017-3515
Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 7.7.2 Veritas NetBackup Appliance versions prior to 2.7.2 Description The issue is related to privilege separation errors in Veritas NetBackup and Veritas NetBackup Appliance. It allows an attacker to execut...
PT-2017-3514
Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 7.7.2 Veritas NetBackup Appliance versions prior to 2.7.2 Description The issue allows for arbitrary privileged command execution using whitelist directory escape with "../" substrings. It is related to...
CVE-2016-7399
scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...
Code injection
scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...
CVE-2016-7399
scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...
CVE-2016-7399
scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...
CVE-2016-7399
CVE-2016-7399 affects Veritas NetBackup Appliance, with remote command execution via shell metacharacters in the hostName parameter to appliancews/getLicense. Versions affected include 2.6.0.x up to 2.6.0.4, 2.6.1.x up to 2.6.1.2, 2.7.x up to 2.7.3, and 3.0.x. The root cause is unsafely handled h...
CVE-2016-7399: Improper Neutralization of Special Elements used in a Command
scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense...
Symantec NetBackup Security Bypass Vulnerability
Symantec NetBackup is the United States Symantec Symantec company a set of data backup and recovery software suite designed for business users. A security vulnerability exists in the NetApp plug-in in versions prior to Symantec NetBackup 2.0.1 due to the program's use of non-unique server...