Veritas NetBackup and NetBackup Appliance CVE-2017-8858 Arbitrary File Write Vulnerability
BID:98381
Info
Veritas NetBackup and NetBackup Appliance CVE-2017-8858 Arbitrary File Write Vulnerability
| Bugtraq ID: | 98381 |
| Class: | Design Error |
| CVE: |
CVE-2017-8858 |
| Remote: | Yes |
| Local: | No |
| Published: | May 07 2017 12:00AM |
| Updated: | May 23 2017 04:24PM |
| Credit: | Sven Blumenstein and Xiaoran Wang from the Google Security Team |
| Vulnerable: |
Veritas NetBackup Appliance 2.7.2 Veritas NetBackup Appliance 2.7.1 Veritas NetBackup Appliance 2.5.4 Veritas NetBackup Appliance 2.5 Veritas NetBackup Appliance 2.0 Veritas NetBackup Appliance 1.2 Veritas NetBackup Appliance 1.1 Veritas NetBackup Appliance 3.0 Veritas NetBackup Appliance 2.7 Veritas NetBackup Appliance 2.6.1.2 Veritas NetBackup Appliance 2.6.1.0 Veritas NetBackup Appliance 2.6.0.4 Veritas NetBackup Appliance 2.6.0.0 Veritas NetBackup 7.7.2 Veritas NetBackup 7.7.1 Veritas NetBackup 7.7 Veritas NetBackup 7.5 Veritas NetBackup 7.1 Veritas NetBackup 8.0 Veritas NetBackup 7.6.1.2 Veritas NetBackup 7.6.1.0 Veritas NetBackup 7.6.0.4 Veritas NetBackup 7.6.0.0 Veritas NetBackup 7.5.0.7 Veritas NetBackup 7.0 |
| Not Vulnerable: | |
Discussion
Veritas NetBackup and NetBackup Appliance CVE-2017-8858 Arbitrary File Write Vulnerability
Veritas NetBackup and NetBackup Appliance are prone to a vulnerability that lets attackers write or overwrite arbitrary files.
An attacker can exploit this issue to write or overwrite arbitrary files in the context of the web server, which may aid in further attacks.
Veritas NetBackup 8.0 and prior and NetBackup Appliance 3.0 and prior are vulnerable.
Veritas NetBackup and NetBackup Appliance are prone to a vulnerability that lets attackers write or overwrite arbitrary files.
An attacker can exploit this issue to write or overwrite arbitrary files in the context of the web server, which may aid in further attacks.
Veritas NetBackup 8.0 and prior and NetBackup Appliance 3.0 and prior are vulnerable.
Exploit / POC
Veritas NetBackup and NetBackup Appliance CVE-2017-8858 Arbitrary File Write Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Veritas NetBackup and NetBackup Appliance CVE-2017-8858 Arbitrary File Write Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Veritas NetBackup and NetBackup Appliance CVE-2017-8858 Arbitrary File Write Vulnerability
References:
References: