CVE-2021-27876

CVE-2021-27876 Nicht authentifizierter RCE-Exploit für den Veritas Backup Exec Agent CVE-2021-27876/77/78 — SHA-Authentifizierungsumgehung zu SYSTEM über NDMP CVEs CVE| Beschreibung| CVSS 3.1 ---|---|--- CVE-2021-27876| Authentifizierungsumgehung durch SHA-Hash-Manipulation im NDMP-Protokoll| 9.8...

CVE-2021-27877-PoC

CVE-2021-27877 Prova di concetto Questo repository contiene una versione modificata del modulo Metasploit originale di Rapid7 per CVE-2021-27877 che interessa l'agente Veritas Backup Exec. Durante i miei test, il modulo Metasploit originale identificava correttamente il target come vulnerabile, m...

Metasploit Weekly Wrap-Up

Veritas Backup Exec Agent RCE This module kindly provided by c0rs targets the Veritas Backup Exec Agent in order to gain RCE as the system/root user. The exploit itself is actually a chain of 3 separate CVEs CVE-2021-27876, CVE-2021-27877 and CVE-2021-27878 which only makes it more impressive...

Veritas Backup Exec Agent for Windows/Linux and Mac Memory Corruption Vulnerability

Veritas Backup Exec Agent is a suite of backup and recovery solutions from Veritas Technologies, USA. A memory corruption vulnerability exists in Veritas Backup Exec Agent for Windows, Linux, and Mac-based platforms. A remote attacker could exploit the vulnerability to cause the agent to crash or...