CVE-2005-1372 nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu.
MediumCVSS 4.6
EPSS 1.00%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bakbone netvault | = 7.1.1 | No fix listed |
| bakbone netvault | = 7.3 | No fix listed |
References
- 20050427 Privilege escalation in BakBone NetVault 7.1 mailing-list
- 15158 third-party-advisory
- 15900 vdb-entry
- 13408 exploit vdb-entry
- ADV-2005-0420 vdb-entry
- bakbone-netvault-gain-privileges(20302) vdb-entry