CVE-2017-6405
HighSummary
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier related to hostname-based security that is vulnerable to DNS spoofing.
Risk Assessment
An attacker could exploit this vulnerability to take control of communications, potentially leading to unauthorized access to data.
Recommendation
It is recommended to upgrade to the latest version of the software to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Veritas NetBackup 8.0 and earlier, NetBackup Appliance 3.0 and earlier
See all- CVE-2017-8858Critical
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' process.
- CVE-2017-8857Critical
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process.
- CVE-2017-8856Critical
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution using the 'bprd' process.
Original NVD description (English source)
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing.