PT-2017-17045 · Veritas · Veritas Netbackup Appliance+1

Published 2017-03-02 · Updated 2019-10-03 · CVE-2017-6407

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 7.7.2 Veritas NetBackup Appliance versions prior to 2.7.2

Description A remote command execution issue was discovered, allowing privileged execution on the NetBackup Server and Client. This can occur on the server or a connected client.

Recommendations For Veritas NetBackup versions prior to 7.7.2, update to version 7.7.2 or later. For Veritas NetBackup Appliance versions prior to 2.7.2, update to version 2.7.2 or later.

Fix

Related Identifiers

CVE-2017-6407

Affected Products

Veritas Netbackup

Veritas Netbackup Appliance

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-6407 · Security Note
• https://veritas.com/content/support/en_US/security/VTS17-003.html#Issue1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-6407 · Vendor Advisory
• http://securityfocus.com/bid/96489 · Note
• http://securitytracker.com/id/1037950 · Note