CVE-2017-6406

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can occur.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-03-02

Last modified

2024-08-05

Affected products

• Access (Veritas)
• Netbackup (Veritas)
• Netbackup Appliance (Veritas)

References

• http://www.securityfocus.com/bid/96486
• https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue5