Symantec just rightly fixes a dangerous security bug in the specialized NetBackup PureDisk software to back up data on the server.

Information from the software developer said that this error could completely be used to enforce malicious code on web servers that make mistakes.

The new security bug discovered in NetBackup stems from a bug in the PHP programming language - the language used to program software.

Symantec NetBackup software patch images 1 Although NetBackup Puredisk's web console is protected by SSL encryption solution, an attacker can still exploit PHP security flaws to execute malicious code on the system if they are operating in mode admin

However, Symantec confirmed that the impact of the newly discovered security flaw in NetBackup is not great because the software does not run in admin mode by default.

Security firm Secunia rated this security error at 4/5 while FrSIRT of France ranked 4/4 in the scale of assessing the vulnerability of its own security bugs. Symantec rated 8.9 / 10.

Symantec recommends that users should quickly install software patches.

Hoang Dung