CVE-2017-8857

critical

Description

In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote command execution using the 'bprd' process.

References

https://www.veritas.com/content/support/en_US/security/VTS17-004.html#Issue2

http://www.securityfocus.com/bid/98384

Details

Source: Mitre, NVD

Published: 2017-05-09

Updated: 2019-10-03

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H