CVE-2017-6408
Severity CVSS v4.0:
Pending analysis
Type:
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Publication date:
02/03/2017
Last modified:
20/04/2025
Description
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbx_exchange can occur when a local user connects to a socket before permissions are secured.
Impact
Base Score 3.x
7.00
Severity 3.x
HIGH
Base Score 2.0
4.40
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:* | 8.0 (including) | |
cpe:2.3:a:veritas:netbackup_appliance:*:*:*:*:*:*:*:* | 3.0 (including) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://www.securityfocus.com/bid/96491
- http://www.securitytracker.com/id/1037950
- https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue8
- http://www.securityfocus.com/bid/96491
- http://www.securitytracker.com/id/1037950
- https://www.veritas.com/content/support/en_US/security/VTS17-003.html#Issue8