CVE-2005-1009

EPSS 57.0%

Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the configure.cfg file.

Affected products

n/a · n/a

public PoCs found — 4

exploitdbwww.exploit-db.com/exploits/905unverified exploitdbwww.exploit-db.com/exploits/16448unverified exploitdbwww.exploit-db.com/exploits/990unverified exploitdbwww.exploit-db.com/exploits/906unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/14814 http://securitytracker.com/id?1013625 https://exchange.xforce.ibmcloud.com/vulnerabilities/19932 http://www.class101.org/netv-locsbof.pdf http://www.class101.org/netv-remhbof.pdf http://www.hat-squad.com/en/000164.html http://www.hat-squad.com/en/000165.html http://www.securityfocus.com/archive/1/394801 http://www.securityfocus.com/bid/12967