scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4 2.6.1.x through 2.6.1.2 2.7.x through 2.7.3 and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense.