Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2017-8895

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Veritas Technologies Veritas Backup Exec 2014是美国Veritas Technologies公司的一套功能强大的数据备份恢复工具。基于web的管理控制台和带有易用向导的直观图形用户界面可以简化安装过程，提高可管理性。高性能代理和选件具有快速保护台式电脑、笔记本电脑和服务器数据的灵活性。可以为Microsoft Windows服务器环境提供经过认证的、全面的、经济高效的保护。 Veritas Backup Exec 2014 版本15及14.1.1187.1126

AI Predicted 9.8 Difficulty: Hard EPSS 71.00% · P99

Public Exploits 2

ExploitDB · 1 EDB-42282 [remote]
Metasploit · 1 ssl_uaf.rb [exploit]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2017-8895

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in multiple agents that can lead to a denial of service or remote code execution. An unauthenticated attacker can use this vulnerability to crash the agent or potentially take control of the agent process and then the system it is running on.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Veritas Technologies Veritas Backup Exec 2014 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Veritas Technologies Veritas Backup Exec 2014是美国Veritas Technologies公司的一套功能强大的数据备份恢复工具。基于web的管理控制台和带有易用向导的直观图形用户界面可以简化安装过程，提高可管理性。高性能代理和选件具有快速保护台式电脑、笔记本电脑和服务器数据的灵活性。可以为Microsoft Windows服务器环境提供经过认证的、全面的、经济高效的保护。 Veritas Backup Exec 2014 版本15及14.1.1187.1126
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2017-8895

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2017-8895

请登录查看更多情报信息。

Vendor Advisories for CVE-2017-8895 (2)

Exploits & Public PoCs for CVE-2017-8895 (1)

Other References for CVE-2017-8895 (1)

Same Patch Batch · n/a · 2017-05-10 · 20 CVEs total

CVE-2017-8878 ASUS RT-AC*和RT-N*设备安全漏洞
CVE-2017-8892 OpenText Tempo Box 跨站脚本漏洞
CVE-2017-8852 SAP SAPCAR 缓冲区错误漏洞
CVE-2017-8891 Dropbox Lepton 安全漏洞
CVE-2017-8890 Linux kernel 安全漏洞
CVE-2017-8879 Dolibarr ERP/CRM 安全漏洞
CVE-2017-7888 Dolibarr ERP/CRM 安全漏洞
CVE-2017-7887 Dolibarr ERP/CRM 跨站脚本漏洞
CVE-2017-7886 Dolibarr ERP/CRM SQL注入漏洞
CVE-2017-7698 SWFTools 安全漏洞
CVE-2016-10371 Silicon Graphics LibTIFF 安全漏洞
CVE-2017-8877 ASUS RT-AC*和RT-N*设备安全漏洞
CVE-2017-8876 Symphony 跨站脚本漏洞
CVE-2017-8875 WordPress Clean Login插件跨站请求伪造漏洞
CVE-2017-8874 Mautic 跨站请求伪造漏洞
CVE-2017-8872 Libxml2 缓冲区错误漏洞
CVE-2017-8868 flatCore 安全漏洞
CVE-2017-5892 ASUS RT-AC*和RT-N*设备安全漏洞
CVE-2017-5891 ASUS RT-AC*和RT-N*设备跨站请求伪造漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2017-8895

No comments yet

Leave a comment