PT-2017-17040 · Veritas · Veritas Netbackup Appliance+1

Published 2017-03-02 · Updated 2019-10-03 · CVE-2017-6401

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 8.0 Veritas NetBackup Appliance versions prior to 3.0

Description An issue in Veritas NetBackup and NetBackup Appliance allows local arbitrary command execution when using bpcd and bpnbat.

Recommendations For Veritas NetBackup versions prior to 8.0, update to version 8.0 or later. For Veritas NetBackup Appliance versions prior to 3.0, update to version 3.0 or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-6401

Affected Products

Veritas Netbackup

Veritas Netbackup Appliance

References · 4

• https://osv.dev/vulnerability/CVE-2017-6401 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6401 · Security Note
• https://veritas.com/content/support/en_US/security/VTS17-003.html#Issue6 · Vendor Advisory
• http://securityfocus.com/bid/96493 · Note