CVE-2017-6399

Veritas NetBackup (Server/Client) prior to 7.7.2 and NetBackup Appliance prior to 2.7.2/3.1.0 is affected by a Privileged remote command execution vulnerability. Multiple connected advisories (Veritas VTS17-003, CNVD/CVE-2017-6399) confirm an arbitrary/root-level command execution vector on the N...

CVE-2022-36956

Affected product: Veritas NetBackup Client. Vulnerability: allows arbitrary command execution from any remote host that has access to a valid host-id NetBackup certificate/private key within the same domain. Versions affected (from sources): 9.0.x through 9.0.0.1 and 9.1.x through 9.1.0.1. Root c...

CVE-2022-42301

Veritas NetBackup (Primary server) is affected by an XXE injection through the nbars process, impacting NetBackup versions up to and including 10.0.0.1 (and related Veritas products). The issue, caused by improper XML handling, can affect confidentiality, integrity, and availability. A fix is ava...

CVE-2022-42307

CVE-2022-42307 affects Veritas NetBackup 10.0.0.1 and earlier, where the NetBackup Primary server’s DiscoveryService is vulnerable to XML External Entity (XXE) Injection. An attacker can exploit the flaw via crafted XML to potentially read local files, with the NVD entry citing high impact across...

CVE-2017-6407

CVE-2017-6407 affects Veritas NetBackup before 7.7.2 and NetBackup Appliance before 2.7.2. The issue allows privileged remote command execution on NetBackup Server and on a connected NetBackup client (server or client side). The vulnerability’s root cause is described as a privileged remote comma...

CVE-2022-42305

Veritas NetBackup through 10.0.0.1 is affected by a path traversal vulnerability in the DiscoveryService that could lead to sensitive data exposure. The issue affects NetBackup Primary servers prior to a version containing the fix; affected component is the DiscoveryService path handling. Impact ...

CVE-2006-0989

The CVE-2006-0989 issue affects VERITAS NetBackup Volume Manager daemon (vmd) and allows remote code execution via a stack-based buffer overflow in vmd. Affected products include NetBackup Enterprise Server 5.0–6.0 and DataCenter/BusinessServer 4.5FP/MP, with the daemon listening on 13701/tcp. Th...

CVE-2006-0991

CVE-2006-0991: Buffer overflow in VERITAS NetBackup vnetd (bpspsserver) on NetBackup 6.0 for Windows allows remote code execution via specially crafted Request Service messages to TCP port 13724. Root cause: lack of boundary checks when processing messages to vnetd; vulnerable component is the bp...

CVE-2017-8856

CVE-2017-8856 affects Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. The vulnerability arises from improper directory whitelisting in the bprd process, allowing unauthenticated, remote command execution. Impact is remote code execution with root/administrator privilege...

CVE-2023-28758

Veritas NetBackup pre-8.3.0.2 is affected by CVE-2023-28758. The BPCD component allows an unprivileged user to specify a log file path when running a NetBackup command, enabling overwriting of existing NetBackup log files. This is a local impact with potential log tampering. Remediation: upgrade ...

CVE-2017-6408

CVE-2017-6408 affects Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. The issue is a local-privilege-escalation race condition in the pbx_exchange component that can occur when a local user connects to a socket before permissions are secured. The impact is privilege esc...

CVE-2022-42304

CVE-2022-42304 concerns Veritas NetBackup (Primary server) up to version 10.0 and related Veritas products. The issue is a SQL Injection affecting the idm, nbars, and SLP manager code. Root cause details across connected sources indicate the vulnerability resides in SQL injection pathways within ...

CVE-2015-6551

Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4, and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4, expose an information-disclosure vulnerability due to not using TLS for administration-console traffic to the NBU server. This allows a remote attacker to sniff ke...

CVE-2022-42300

CVE-2022-42300 affects Veritas NetBackup: the NetBackup Primary server nbars process can crash, causing a denial of service. Multiple connected sources describe the issue as affecting NetBackup versions up to and including 10.0.0.1 (and related Veritas products), with the nbars crash potentially ...

CVE-2017-6404

Veritas NetBackup before 7.7 and NetBackup Appliance before 2.7 contain a vulnerability where world-writable log files can be destroyed or spoofed. This is documented in CVE-2017-6404 and reflected across multiple sources (NVD entry; Nessus plugin). The initial disclosures do not provide remediat...

CVE-2006-0990

The CVE-2006-0990 issue affects VERITAS NetBackup master servers, specifically the NetBackup Catalog daemon (bpdbm). It is a stack-based buffer overflow caused by insufficient bounds checking in a buffer used to hold user-supplied data, exploited via remote input on the bpdbm service (listening o...