Critical · published January 6, 2021
🚨 An attacker can take full control of your Windows system with just a sneaky folder! This critical vulnerability in Veritas NetBackup and OpsCenter allows low privileged users to execute arbitrary code as SYSTEM or Administrator. 🔥 Think of it like a crafty employee creating a fake file cabinet in the office to store confidential documents, where they can access everything without anyone noticing. If the system tries to access that cabinet, the intruder gets in! An attacker could easily gain administrator access, allowing them to rummage through all your sensitive data, manipulate installed applications, or even sabotage the entire system. This is absolutely devastating for any organization relying on Veritas NetBackup or OpsCenter—imagine a burglar waltzing into your office with your keys!
Think of it like a crafty employee creating a fake file cabinet in the office to store confidential documents, where they can access everything without anyone noticing. If the system tries to access that cabinet, the intruder gets in! This vulnerability arises from the OpenSSL processes attempting to load libraries from directories that don't exist by default in Windows. If a low privileged user creates a specific path with a malicious library, they can execute their own code with elevated privileges.
An attacker could easily gain administrator access, allowing them to rummage through all your sensitive data, manipulate installed applications, or even sabotage the entire system. This is absolutely devastating for any organization relying on Veritas NetBackup or OpsCenter—imagine a burglar waltzing into your office with your keys! Immediately patch your Veritas NetBackup and OpsCenter to version 8.3.0.2 or later. Restrict user privileges to prevent low privileged users from creating these risky directories. Regularly audit your systems to identify any suspicious paths that could be exploited. You've got this! By following these steps, you'll secure your systems and keep those pesky intruders at bay. 🛡️