Critical · published January 6, 2021
🚨 A crafty low-privileged user can hijack your system's startup routine with a carefully placed file! Think of this like a sneaky delivery driver who changes the delivery instructions on your front porch, making it easy for them to drop off a package that grants them access to your entire house when you’re not looking. This vulnerability allows an attacker to gain SYSTEM-level access, which is absolutely devastating! They could access all your data, manipulate installed applications, and if your system is an Active Directory domain controller, they might even compromise the entire domain. It's like handing over the keys to your digital fortress to a stranger!
Think of this like a sneaky delivery driver who changes the delivery instructions on your front porch, making it easy for them to drop off a package that grants them access to your entire house when you’re not looking. The issue arises when Veritas Backup Exec loads the OpenSSL library at startup, looking for a configuration file that may not exist. If a low-privileged user creates a malicious 'openssl.cnf' file, they can execute arbitrary code as SYSTEM during the service startup.
This vulnerability allows an attacker to gain SYSTEM-level access, which is absolutely devastating! They could access all your data, manipulate installed applications, and if your system is an Active Directory domain controller, they might even compromise the entire domain. It's like handing over the keys to your digital fortress to a stranger! To remediate this vulnerability, immediately update to Backup Exec version 21.1 with hotfix 657517, or apply hotfix 298543 for versions 16.2 and 20.6. Additionally, audit your system for malicious configuration files and ensure strict user permissions are enforced. 🛡️ You've got this! With these steps, you'll safeguard your system from this sneaky attack! 💪✨