Critical · published January 6, 2021
🔥 A low-privileged user's simple directory creation can unlock full admin access in Veritas NetBackup and OpsCenter! Think of it like a cheeky guest at a hotel making a fake reservation for the master suite. If the staff doesn’t check the back end, that guest can waltz right in and access all the rooms - or in this case, all the system data! An attacker could easily execute arbitrary code as SYSTEM or Administrator, gaining unrestricted access to sensitive data, installed applications, and critical system functionalities. This is a recipe for disaster, allowing malicious actions that could compromise the entire network and its resources.
Think of it like a cheeky guest at a hotel making a fake reservation for the master suite. If the staff doesn’t check the back end, that guest can waltz right in and access all the rooms - or in this case, all the system data! This vulnerability arises from NetBackup’s reliance on Strawberry Perl to load libraries from user-defined paths, which can be manipulated by low-privileged users on Windows systems. This misconfiguration allows the execution of malicious code if the path matches the expected loading points.
An attacker could easily execute arbitrary code as SYSTEM or Administrator, gaining unrestricted access to sensitive data, installed applications, and critical system functionalities. This is a recipe for disaster, allowing malicious actions that could compromise the entire network and its resources. To secure your systems, immediately update to the latest version of Veritas NetBackup and OpsCenter, where this vulnerability is patched. Review user permissions to ensure that only authorized personnel can create directories in critical paths on Windows systems. Regularly audit your installation and upgrade processes to catch any potential misconfigurations. You’ve got this! By addressing this vulnerability promptly, you’ll lock down your systems and fortify your defenses! 🛡️