CVE:CVE-2017-6399
CNNVD:CNNVD-201703-065
Veritas Access等都是美国Veritas Technologies公司的产品。Veritas Access是一套用于非结构化数据的横向扩展NAS解决方案；Veritas NetBackup Appliance是一款企业级备份管理设备。
多款Veritas产品中存在提权漏洞。本地攻击者可利用该漏洞以root权限或管理员权限在本地系统上执行任意命令。以下产品和版本受到影响：Veritas Access 7.2.1及之前的版本；NetBackup Appliance 2.7.2之前的版本；NetBackup Server和Client 7.7.2之前的版本。
solution:Upgrade veritas access to a higher version than 7.2.1,and avoid the version (,7.2.1]; Upgrade veritas netbackup to a higher version than 7.7.1,and avoid the version (,7.7.1]; Upgrade veritas netbackup_appliance to a higher version than 2.7.1,and avoid the version (,2.7.1]