Vulnerability Description
In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution using the 'bprd' process.
CVSS Score
9.8
CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Veritas | Netbackup | <= 8.0 |
| Veritas | Netbackup Appliance | <= 3.0 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/98379Third Party AdvisoryVDB Entry
- https://www.veritas.com/content/support/en_US/security/VTS17-004.html#Issue1Vendor Advisory
- http://www.securityfocus.com/bid/98379Third Party AdvisoryVDB Entry
- https://www.veritas.com/content/support/en_US/security/VTS17-004.html#Issue1Vendor Advisory
FAQ
What is CVE-2017-8856?
CVE-2017-8856 is a vulnerability with a CVSS score of 9.8 (CRITICAL). In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution using the 'bprd' process.
How severe is CVE-2017-8856?
CVE-2017-8856 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2017-8856?
Check the references section above for vendor advisories and patch information. Affected products include: Veritas Netbackup, Veritas Netbackup Appliance.