[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[VulnWatch] BakBone Netvault 6.x/7.x Remote Heap Buffer Overflow
- To: "Full-Disclosure" <Full-Disclosure@xxxxxxxxxxxxxxxxx>, <vulnwatch@xxxxxxxxxxxxx>
- Subject: [VulnWatch] BakBone Netvault 6.x/7.x Remote Heap Buffer Overflow
- From: "class101@xxxxxxxxxxxxx" <class101@xxxxxxxxxxxxx>
- Date: Fri, 1 Apr 2005 16:52:18 +0200
According to their website (bakbone.com),
BakBone Netvault 6.x/7.x is a professional backup software with several
offices in the world and some pro customers as Apple, AT&T, Pirelli, LMU,
HP, NIP,NASA, etc....
A Vulnerability exists in the netvault server
advisory: class101.org/netv-remhbof.pdf
poc: class101.org/36/55/op.php
recommendation: to block incoming connections to 20031/tcp, 20031/udp
-------------------------------------------------------------
class101
Jr. Researcher
Hat-Squad.com
-------------------------------------------------------------