CVE-2015-6552

The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attackers to make arbitrary RPC calls via unspecified vectors.

Score

CVSS 3.0 9.8 Critical

Status

Modified - secure@symantec.com

Published

2016-05-07

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Netbackup (Veritas)
• Netbackup Appliance (Veritas)

References

• http://www.securitytracker.com/id/1035704
• https://www.veritas.com/content/support/en_US/security/VTS16-001.html