CVE-2005-1009 Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2...
HighCVSS 10.0
EPSS 57.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the configure.cfg file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bakbone netvault | = 7.0 | No fix listed |
| bakbone netvault | = 7.1 | No fix listed |
References
- 14814 third-party-advisory vendor-advisory
- 1013625 exploit vdb-entry
- www.class101.org vendor-advisory
- www.class101.org vendor-advisory
- www.hat-squad.com exploit vendor-advisory
- www.hat-squad.com exploit vendor-advisory
- 20050401 [Hat-Squad Advisory] Bakbone NetVault Heap overflow Vulnerabilities mailing-list vendor-advisory
- 12967 exploit vdb-entry
- netvault-configurecfg-bo(19932) vdb-entry