CVE-2020-37045: NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path
Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the NetBackup INET Daemon service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files\Veritas\NetBackup\bin\bpinetd.exe to inject malicious code that would execute with elevated LocalSystem privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-37045?
CVE-2020-37045 is considered a medium severity vulnerability due to its potential for local code execution.
How do I fix CVE-2020-37045?
To fix CVE-2020-37045, ensure that the service paths for the NetBackup INET Daemon are properly quoted.
Who is affected by CVE-2020-37045?
CVE-2020-37045 affects users of Veritas NetBackup 7.0 that utilize the NetBackup INET Daemon service.
What type of vulnerability is CVE-2020-37045?
CVE-2020-37045 is an unquoted service path vulnerability that could allow local users to execute arbitrary code.
Can CVE-2020-37045 be exploited remotely?
No, CVE-2020-37045 requires local access to exploit the vulnerability.