Arbitrary Command Execution Vulnerability in Veritas NetBackup and NetBackup Appliance
CVE-2017-6406

8.8HIGH

Key Information:

Vendor: Veritas
Status: Netbackup Appliance; Netbackup; Access
Vendor: CVE Published:; 2 March 2017

What is CVE-2017-6406?

A vulnerability exists in Veritas NetBackup and NetBackup Appliance that allows for arbitrary command execution due to improper handling of directory paths. By using a directory escape technique with '../' substrings, an attacker can potentially execute commands with elevated privileges. This flaw affects all versions of Veritas NetBackup prior to 7.7.2 and NetBackup Appliance before version 2.7.2, posing a significant security risk. Organizations utilizing these products should apply the necessary security patches to mitigate exposure to this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch