CVE-2009-3448

npvmgr.exe in BakBone NetVault Backup 8.22 Build 29 allows remote attackers to cause a denial of service daemon crash via a packet to 1 TCP or 2 UDP port 20031 with a large value in an unspecified size field, which is not properly handled in a malloc operation. NOTE: some of these details are...

CVE-2009-3448

CVE-2009-3448 affects BakBone NetVault Backup 8.22 Build 29 (npvmgr.exe). A remote attacker can cause a denial-of-service (daemon crash) by sending a packet to either TCP or UDP port 20031 containing a large value in an unspecified size field, which is not properly handled in a malloc operation. ...

PT-2009-5742 · Bakbone · Bakbone Netvault Backup

Name of the Vulnerable Software and Affected Versions: BakBone NetVault Backup version 8.22 Build 29 Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This can be achieved by sending a packet to either TCP or UDP port 20031 with a large valu...

BakBone NetVault: Backup npvmgr.exe服务远程拒绝服务漏洞

BUGTRAQ ID: 36489 NetVault: Backup是一款实时备份和灾难恢复软件。 NetVault: Backup的npvmgr.exe进程没有执行长度检查便将从网络报文中获得的字段传送给了malloc，远程攻击者可以通过向20031端口发送特制的UDP或TCP报文导致服务崩溃。 BakBone NetVault: Backup 8.22 Build 29 厂商补丁： BakBone ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.bakbone.com/...

BakBone NetVault 6.x/7.x Local Stack Buffer Overflow Exploit

No description provided by source. / for more informations class101.org/netv-locsbof.pdf / include stdio.h include string.h ifdef WIN32 include "winsock2.h" pragma commentlib, "ws232" else include sys/socket.h include sys/types.h include netinet/in.h include netinet/insystm.h include netinet/ip.h...

CVE-2007-3911

Multiple heap-based buffer overflows in 1 clsscheduler.exe aka scheduler client and 2 srvscheduler.exe aka scheduler server in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests...

Heap overflow

Multiple heap-based buffer overflows in 1 clsscheduler.exe aka scheduler client and 2 srvscheduler.exe aka scheduler server in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests...

CVE-2007-3911

Multiple heap-based buffer overflows in 1 clsscheduler.exe aka scheduler client and 2 srvscheduler.exe aka scheduler server in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests...

CVE-2007-3911

BakBone NetVault Reporter 3.5 before Update4 is affected by a heap-based overflow in both the scheduler client (clsscheduler.exe) and scheduler server (srvscheduler.exe). The vulnerability allows remote attackers to execute arbitrary code by sending overly long filename arguments in HTTP requests...

NetVault Process Manager Service Detection

The remote service is an instance of NetVault Process Manager, part of Dell NetVault, a cross-platform backup and restore application. Dell NetVault was formerly known as BakBone NetVault Backup. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25800;...

ZDI-07-044: BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability

ZDI-07-044: BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-044.html July 25, 2007 -- CVE ID: CVE-2007-3911 -- Affected Vendor: BakBone -- Affected Products: BakBone NetVault Reporter 3.5 Update4 -- TippingPointTM IPS Customer...

BakBone NetVault Reporter scheduler service buffer overflow

Heap buffer overflows in client TCP/7978 and server TCP/7977 schedule services...

NetVault Report Manager Scheduler File Name Handling Overflow

The remote host is running NetVault Report Manager, a tool for monitoring backup reports. The Server and Client Scheduler components included in the version of NetVault Report Manager installed on the remote host suffer from a heap overflow vulnerability that can occur when processing overly long...

BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with affected installations of BakBone NetVault Reporter. User interaction is not required to exploit this vulnerability. The specific flaw exists both within the scheduler client clsscheduler.exe listening on TCP por...

Bakbone NetVault < 7.4.0 Unspecified Overflow

Binary data 3965.prm...

BakBone NetVault Remote Heap Overflow

This module exploits a heap overflow in the BakBone NetVault Process Manager service. This code is a direct port of the netvault.c code written by nolimit and BuzzDee. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

BakBone NetVault 7.1 Local Privilege Escalation Exploit

No description provided by source. // ===== Start UnhideNetVaultServiceWindow.c ====== include stdio.h include windows.h int main void HWND hWnd; char szWindowName = "C:\Program Files\BakBone Software\NetVault\bin\nvstatsmngr.exe"; printf "Finding window %s\n", szWindowName ; hWnd = FindWindow...

BakBone NetVault remote heap overflow

Added: 03/24/2006 CVE: CVE-2005-1009 BID: 12967 OSVDB: 15234 Background BakBone NetVault is a distributed data backup and restore solution for UNIX and Windows networks. Problem A heap overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted...

BakBone NetVault remote heap overflow

Added: 03/24/2006 CVE: CVE-2005-1009 BID: 12967 OSVDB: 15234 Background BakBone NetVault is a distributed data backup and restore solution for UNIX and Windows networks. Problem A heap overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted...

BakBone NetVault remote heap overflow

Added: 03/24/2006 CVE: CVE-2005-1009 BID: 12967 OSVDB: 15234 Background BakBone NetVault is a distributed data backup and restore solution for UNIX and Windows networks. Problem A heap overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted...