PT-2017-3570 · Quest · Netvault Backup

Rgod · Published 2017-12-06 · Updated 2019-10-09 · CVE-2017-17415

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup versions 11.3.0.12

Description: The issue is related to insufficient protection of the SQL query structure in the NVBUPhaseStatus Count method. This allows a remote attacker to execute arbitrary code by exploiting the lack of proper validation of a user-supplied string used to construct SQL queries. The attacker can leverage this to execute code in the context of the underlying database. No information is provided about the estimated number of potentially affected devices or real-world incidents.

Recommendations: For Quest NetVault Backup version 11.3.0.12, consider disabling the NVBUPhaseStatus Count method until a patch is available to prevent exploitation. Restrict access to the SQL queries to minimize the risk of code execution. Avoid using user-supplied strings in SQL queries until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2018-00483

CVE-2017-17415

ZDI-17-980

Affected Products

Netvault Backup

References · 4

• https://zerodayinitiative.com/advisories/ZDI-17-980 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-17415 · Security Note
• https://osv.dev/vulnerability/CVE-2017-17415 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00483 · Security Note