CVE Catalog

CVE-2017-6408

High
Published: Translated: NVD NIST

Summary

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier related to local privilege escalation. A race condition in pbx_exchange can occur when a local user connects to a socket before permissions are secured.

Risk Assessment

A local attacker may exploit this vulnerability to gain elevated privileges on the system, potentially leading to unauthorized access to data or resources.

Recommendation

It is recommended to upgrade to the latest version of Veritas NetBackup and NetBackup Appliance to mitigate this vulnerability. Additionally, monitor local user access to the system.

Other vulnerabilities in Veritas NetBackup 8.0 i wcześniejsze, NetBackup Appliance 3.0 i wcześniejsze

Original NVD description (English source)

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbx_exchange can occur when a local user connects to a socket before permissions are secured.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS