Netbackup

An issue was discovered in Veritas NetBackup before 10.5. This only applies to NetBackup components running on a Windows Operating System. If a user executes specific NetBackup commands or an attacker uses social engineering techniques to impel the user to execute the commands, a malicious DLL could be loaded, resulting in execution of the attacker's code in the user's security context.

Published: 2024-11-18T00:00:00.000Z
Updated: 2024-11-19T15:43:05.461Z

An issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used in NetBackup can be leveraged to perform arbitrary file deletion on protected files.

Published: 2024-04-26T00:00:00.000Z
Updated: 2024-08-02T02:36:04.596Z

In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.

Published: 2024-03-07T00:00:00.000Z
Updated: 2024-11-15T19:13:08.179Z

An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may allow a lower-level user to elevate privileges and compromise the system.

Published: 2023-03-23T00:00:00.000Z
Updated: 2025-02-25T19:36:23.353Z

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to overwrite existing NetBackup log files.

Published: 2023-03-23T00:00:00.000Z
Updated: 2025-02-25T19:55:33.539Z

The Java Admin Console in Veritas NetBackup through 10.1 and related Veritas products on Linux and UNIX allows authenticated non-root users (that have been explicitly added to the auth.conf file) to execute arbitrary commands as root.

Published: 2022-11-17T00:00:00.000Z
Updated: 2025-04-29T13:54:22.295Z

An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can delete arbitrary files by leveraging a path traversal in the pbx_exchange registration code.

Published: 2022-10-03T14:48:07.000Z
Updated: 2024-08-03T13:03:45.963Z

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) Injection attack through the DiscoveryService service.

Published: 2022-10-03T14:48:17.000Z
Updated: 2024-08-03T13:03:45.974Z

An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can send a crafted packet to pbx_exchange during registration and cause a NULL pointer exception, effectively crashing the pbx_exchange process.

Published: 2022-10-03T14:48:27.000Z
Updated: 2024-08-03T13:03:45.941Z

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a Path traversal attack through the DiscoveryService service.

Published: 2022-10-03T14:48:35.000Z
Updated: 2024-08-03T13:03:45.898Z

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting idm, nbars, and SLP manager code.

Published: 2022-10-03T14:48:42.000Z
Updated: 2024-08-03T13:03:45.919Z

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a second-order SQL Injection attack affecting the NBFSMCLIENT service by leveraging CVE-2022-42302.

Published: 2022-10-03T14:48:58.000Z
Updated: 2024-08-03T13:03:45.917Z

An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting the NBFSMCLIENT service.

Published: 2022-10-03T14:49:05.000Z
Updated: 2024-08-03T13:03:45.915Z

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) injection attack through the nbars process.

Published: 2022-10-03T14:49:13.000Z
Updated: 2024-08-03T13:03:45.974Z

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server nbars process can be crashed resulting in a denial of service. (Note: the watchdog service will automatically restart the process.)

Published: 2022-10-03T14:49:21.000Z
Updated: 2024-08-03T13:03:45.935Z

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a denial of service attack through the DiscoveryService service.

Published: 2022-10-03T14:49:28.000Z
Updated: 2024-08-03T13:03:45.931Z

In Veritas NetBackup, an attacker with unprivileged local access to a NetBackup Client may send specific commands to escalate their privileges. This affects 8.0 through 8.1.2, 8.2, 8.3 through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1.

Published: 2022-07-27T20:58:09.000Z
Updated: 2024-08-03T10:21:32.411Z

In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may be able to create or modify OpsCenter user accounts. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.

Published: 2022-07-27T20:58:39.000Z
Updated: 2024-08-03T10:21:32.231Z

In Veritas NetBackup OpsCenter, certain endpoints could allow an unauthenticated remote attacker to gain sensitive information. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.

Published: 2022-07-27T20:59:09.000Z
Updated: 2024-08-03T10:21:32.459Z

In Veritas NetBackup OpsCenter, a hard-coded credential exists that could be used to exploit the underlying VxSS subsystem. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.

Published: 2022-07-27T20:59:34.000Z
Updated: 2024-08-03T10:21:32.239Z

In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may compromise the host by exploiting an incorrectly patched vulnerability. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.

Published: 2022-07-27T20:59:55.000Z
Updated: 2024-08-03T10:21:32.173Z

In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may be able to perform remote command execution through a Java classloader manipulation. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.

Published: 2022-07-27T21:00:20.000Z
Updated: 2024-08-03T10:21:31.968Z

In Veritas NetBackup OpsCenter, an attacker with local access to a NetBackup OpsCenter server could potentially escalate their privileges. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.

Published: 2022-07-27T21:00:48.000Z
Updated: 2024-08-03T10:21:32.351Z

In Veritas NetBackup OpsCenter, a DOM XSS attack can occur. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.

Published: 2022-07-27T21:01:05.000Z
Updated: 2024-08-03T10:21:32.254Z

Veritas NetBackup OpsCenter Analytics 9.1 allows XSS via the NetBackup Master Server Name, Display Name, NetBackup User Name, or NetBackup Password field during a Settings/Configuration Add operation.

Published: 2022-04-19T12:38:27.000Z
Updated: 2024-08-04T03:15:28.923Z

Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the NetBackup INET Daemon service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files\Veritas\NetBackup\bin\bpinetd.exe to inject malicious code that would execute with elevated LocalSystem privileges.

Published: 2026-02-01T14:38:27.147Z
Updated: 2026-03-05T01:27:40.518Z

An issue was discovered in Veritas NetBackup through 8.3.0.1 and OpsCenter through 8.3.0.1. Processes using OpenSSL attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under the top level of any drive. If a low privileged user creates an affected path with a library that the Veritas product attempts to load, they can execute arbitrary code as SYSTEM or Administrator. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This vulnerability affects master servers, media servers, clients, and OpsCenter servers on the Windows platform. The system is vulnerable during an install or upgrade and post-install during normal operations.

Published: 2021-01-06T00:50:59.000Z
Updated: 2024-08-04T17:23:09.467Z

An issue was discovered in Veritas NetBackup and OpsCenter through 8.3.0.1. NetBackup processes using Strawberry Perl attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under C:\. If a low privileged user on the Windows system creates an affected path with a library that NetBackup attempts to load, they can execute arbitrary code as SYSTEM or Administrator. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This affects NetBackup master servers, media servers, clients, and OpsCenter servers on the Windows platform. The system is vulnerable during an install or upgrade on all systems and post-install on Master, Media, and OpsCenter servers during normal operations.

Published: 2021-01-06T00:52:20.000Z
Updated: 2024-08-04T17:23:09.331Z

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using the 'bprd' process.

Published: 2017-05-09T21:00:00.000Z
Updated: 2024-08-05T16:48:22.823Z

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process.

Published: 2017-05-09T21:00:00.000Z
Updated: 2024-08-05T16:48:22.898Z

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution using the 'bprd' process.

Published: 2017-05-09T21:00:00.000Z
Updated: 2024-08-05T16:48:22.844Z

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Unauthenticated CORBA interfaces permit inappropriate access.

Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.279Z

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbx_exchange can occur when a local user connects to a socket before permissions are secured.

Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.258Z

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client) can occur.

Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.299Z

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can occur.

Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.286Z

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing.

Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.242Z

An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7. There are world-writable log files, allowing destruction or spoofing of log data.

Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.259Z

An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. NetBackup Cloud Storage Service uses a hardcoded username and password.

Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.257Z

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Denial of service affecting NetBackup server can occur.

Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.246Z

An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. Local arbitrary command execution can occur when using bpcd and bpnbat.

Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.245Z

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged command execution on NetBackup Server and Client can occur (on the local system).

Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.275Z

An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client) can occur.

Published: 2017-03-02T06:00:00.000Z
Updated: 2024-08-05T15:25:49.252Z