CVE-2017-6407
HighSummary
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2 that allows privileged remote command execution on NetBackup Server and Client.
Risk Assessment
An attacker can remotely execute commands on the server or connected client, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to version 7.7.2 or later for NetBackup and 2.7.2 or later for NetBackup Appliance to mitigate this vulnerability.
Other vulnerabilities in Veritas NetBackup, Veritas NetBackup Appliance
See all- CVE-2017-6406High
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2 that allows arbitrary privileged command execution using whitelist directory escape with '../' substrings.
- CVE-2017-6400High
An issue was discovered in Veritas NetBackup before version 7.7.2 and NetBackup Appliance before version 2.7.2, allowing privileged command execution on the NetBackup Server and Client on the local system.
Original NVD description (English source)
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client) can occur.