CVE-2017-6406
HighSummary
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2 that allows arbitrary privileged command execution using whitelist directory escape with '../' substrings.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized system access and execution of malicious code, posing a significant security threat to the organization.
Recommendation
It is recommended to upgrade to the latest version of Veritas NetBackup and NetBackup Appliance to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Veritas NetBackup, Veritas NetBackup Appliance
See all- CVE-2017-6407High
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2 that allows privileged remote command execution on NetBackup Server and Client.
- CVE-2017-6400High
An issue was discovered in Veritas NetBackup before version 7.7.2 and NetBackup Appliance before version 2.7.2, allowing privileged command execution on the NetBackup Server and Client on the local system.
Original NVD description (English source)
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can occur.