CVE-2021-27877-PoC

CVE-2021-27877 Proof of Concept This repository contains a modified version of the original Rapid7 Metasploit module for CVE-2021-27877 affecting the Veritas Backup Exec Agent. During my testing, the original Metasploit module successfully identified the target as vulnerable but consistently fail...

CVE-2021-27876

CVE-2021-27876 针对 Veritas Backup Exec Agent 的未认证远程代码执行利用（CVE-2021-27876/77/78）—— 通过 NDMP 绕过 SHA 认证获取 SYSTEM 权限 CVEs CVE| 描述| CVSS 3.1 ---|---|--- CVE-2021-27876| 通过 NDMP 协议中的 SHA 哈希操纵绕过认证| 9.8 严重 CVE-2021-27877| 未认证任意文件读取（通过 NDMP）| 9.8 严重 CVE-2021-27878| 通过 NDMPEXECUTECOMMAND 执行任意 OS 命令| 9.8 严重 公...

Metasploit Weekly Wrap-Up

Veritas Backup Exec Agent RCE This module kindly provided by c0rs targets the Veritas Backup Exec Agent in order to gain RCE as the system/root user. The exploit itself is actually a chain of 3 separate CVEs CVE-2021-27876, CVE-2021-27877 and CVE-2021-27878 which only makes it more impressive...

Veritas Backup Exec Agent for Windows/Linux and Mac Memory Corruption Vulnerability

Veritas Backup Exec Agent is a suite of backup and recovery solutions from Veritas Technologies, USA. A memory corruption vulnerability exists in Veritas Backup Exec Agent for Windows, Linux, and Mac-based platforms. A remote attacker could exploit the vulnerability to cause the agent to crash or...