PT-2017-2904
CVE-2017-8858
·
Published
2017-05-07
·
Updated
2019-10-03
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Veritas NetBackup versions 8.0 and earlier
Veritas NetBackup Appliance versions 3.0 and earlier
Description
The issue is related to insufficient access control in the NetBackup and NetBackup Appliance software, allowing for unauthenticated privileged remote file write. This can be achieved by exploiting the
bprd process.Recommendations
For Veritas NetBackup versions 8.0 and earlier, update to a version later than 8.0 to resolve the issue.
For Veritas NetBackup Appliance versions 3.0 and earlier, update to a version later than 3.0 to resolve the issue.
As a temporary workaround, consider restricting access to the
bprd process to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾