This could allow a remote attacker with access to the system to access and corrupt the data stored in the Primary database. Depending on the nature of the data, this could allow an attacker to gain access to the system and potentially manipulate the data.
Note: The severity of this issue depends on the nature of the data being stored. There are certain types of data that would be more critical than others. If you have a lot of data with a critical value (e.g. credit card information), then you should consider moving that data to a different type of storage. We recommend using a different type of storage than your Redundant Data Store. The following steps should be taken to mitigate this issue: The NetBackup Primary server and related products must be upgraded to version 10.0.0.3 and 10.0.0.4.
The Primary server must be shut down, and then restarted with the new version.
The Secondary server must be configured with the new version of the Primary server, and then the Secondary server must be turned off.
For the Primary server, the following steps must be taken: The Process Monitor must be configured to monitor the nbars process.
The following registry key must be modified. Warning: Modifying the registry is a risky task. If you do not know how to do it or if you have any doubts, you must not modify it. The following steps should be taken to modify the registry key
1
. Open registry editor
2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetBackup 3. Create the following key and set its value to 0xFFFFFFFF
4. Modify the following registry key
5. Save and close the registry editor
1. Stop NetBackup 2. Backup data using Netbackup version 10 3. Restart server with version 10 4. Delete old secondary server 5. Configure new secondary server for old primary server 6. Remove old secondary server
Step 1: To modify the registry key, you must have a text editor that is capable of editing the regis ry.
Step 2: In the text editor, locate the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NetBackup
Step 3: Add a new string value to the right of the ‘Registry Value’ column called "ExchangeServer" that has the value %exchange%
Step 4: In the text editor, click on File > Save to save your changes and exit.
If you are having trouble with this issue, please contact our Technical Support team at support@netbackup.com for assistance.
Install Process Monitor
• The registry key must be modified.
• The Process Monitor must be installed on the Primary server.
• The following registry key must be created: a) HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBackup\ProcessMonitor
• New DWORD value called "Enable" with a data type of REG_DWORD and a value of 1.
Note: Do not modify this registry key or any other part of the system, as it could cause significant loss of data or make your system unstable. After taking these steps, the issue should no longer occur.
Step 1: Navigate to the registry key location HKLM\SYSTEM\CurrentControlSet\Services
Step 2: Find the registry key named "nbars"
Step 3: In this registry key, find the following registry value: "Start"
Step 4: Double-click on Start. Step 5: Modify it to read "0
Warning: The following steps should only be performed by someone with a thorough understanding of th ier system.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL-CRYPTO-EXCHANGE
"EnableChannels"=dword:00000002
Timeline
Published on: 10/03/2022 15:15:00 UTC
Last modified on: 10/04/2022 20:52:00 UTC