CVE-2017-8858

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' process

published May 9, 2017

CVSS
โ€”
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

โš ๏ธ Unauthenticated remote file write in Veritas NetBackup could let anyone sneak in and write files like it's their personal playground! ๐Ÿ”ฅ Think of it like an unguarded storage room where anyone can stroll in and leave their own boxes without any security checks โ€” absolutely concerning when it comes to sensitive data! An attacker could exploit this vulnerability to drop malicious files, compromising the integrity and security of your backup system. They could potentially execute any unauthorized commands or manipulate backups, leading to devastating data loss or corruption.

Put simply

Think of it like an unguarded storage room where anyone can stroll in and leave their own boxes without any security checks โ€” absolutely concerning when it comes to sensitive data! This vulnerability allows attackers to perform unauthorized writes to files through the 'bprd' process without needing any authentication, effectively bypassing security measures.

What to do

An attacker could exploit this vulnerability to drop malicious files, compromising the integrity and security of your backup system. They could potentially execute any unauthorized commands or manipulate backups, leading to devastating data loss or corruption. Update Veritas NetBackup to version 8.1 or later and ensure your NetBackup Appliance is at version 3.1 or above to patch this vulnerability. Also, review your firewall rules to limit access to the affected services. You've got this! Implement these changes and you'll bolster your defenses in no time! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02698 ยท 85.7th percentile
Published
2017-05-09T21:00Z
EPSS history
Timeline
  • 09 MAY 21:00Z
    In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' process
    cvelistv5