Forum Discussion

fb1's avatar
fb1
Level 2
3 months ago

Security Advisory affecting NetBackup on Windows--Issue: Arbitrary File Delete

Hello Team, Security Advisory affecting NetBackup on Windows--Issue: Arbitrary File Delete ---any impact on Netbackup version 7.7.3 & lower versions. Below is the reference article: https://www.ve...
2010 all revisions
Windows 10
Hamza_H's avatar
Hamza_H
Moderator

the recommended is to upgrade to minimum 10.1.1 and apply msdp bundle eeb for that version on your windows servers.(execpt for 10.4 which doesn't require any eeb installation).

otherwise, as it is described in the article the mitigation step is to restrict  access to the boost_interprocess directory (C:\ProgramData\boost_interprocess) to local administrator users only

Vincent_L's avatar
Vincent_L
Level 3
3 months ago
How about those Master servers, ops centre running on Windows and on version 10.1.1? Needs to apply the EEB as well?
  • Hamza_H's avatar
    Hamza_H
    Moderator
    3 months ago

    Hi  Vincent,

    as it is stated in the article by veritas:

    Affected Components: Only on Microsoft Windows Operating Systems - Primary Server, Media Server and Clients
    Affected Versions: 10.3.0.1, 10.3, 10.2.0.1, 10.2, 10.1.1, 10.1, 10.0.0.1, 10.0, 9.1.0.1, 9.1, 8.3.0.2.
             Note: Older unsupported versions may also be affected.

    Recommended Action:

    Mitigation:  Restrict access to the boost_interprocess directory (C:\ProgramData\boost_interprocess) to local administrator users only

     

    so for 10.1.1 you need to install the MSDP bundle on all servers concerned (master, media & clients).