CVE-2005-1372

BakBone NetVault 7.1 is affected by CVE-2005-1372 due to nvstatsmngr.exe not properly dropping privileges before opening files. This local privilege escalation could allow a local user to gain elevated privileges via the Help menu. The available documentation confirms the vulnerable component and...

CVE-2005-1372

nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu...

CVE-2005-1009

Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow 1 remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or 2 local users to execute arbitrary code via a long Name entry in the configure.cfg file...

CVE-2005-1372: Undefined Security Weakness

nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu...

Bakbone Netvault privilege escalation

Hidden windows of local system process handles user's messages...

Privilege escalation in BakBone NetVault 7.1

Summary: Privilege escalation in BakBone NetVault 7.1 http://www.bakbone.com/ Details: The nvstatsmngr.exe process, which is a hidden command prompt window that is permitted to interact with the Desktop, can be manipulated by any local user to escalate privileges to that of the LocalSystem accoun...

BakBone NetVault 7.1 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ======================================================= BakBone NetVault 7.1 Local Privilege Escalation Exploit ======================================================= // ===== Start UnhideNetVaultServiceWindow.c ====== include include int...

BakBone NetVault 7.1 - Local Privilege Escalation

// ===== Start UnhideNetVaultServiceWindow.c ====== include include int main void HWND hWnd; char szWindowName = "C:\Program Files\BakBone Software\NetVault\bin\nvstatsmngr.exe"; printf "Finding window %s\n", szWindowName ; hWnd = FindWindow NULL, szWindowName ; if hWnd == NULL printf "ERROR!...

BakBone NetVault 7.1 - Local Privilege Escalation

BakBone NetVault 7.1 - Local Privilege Escalation // ===== Start UnhideNetVaultServiceWindow.c ====== include include int main void HWND hWnd; char szWindowName = "C:\Program Files\BakBone Software\NetVault\bin\nvstatsmngr.exe"; printf "Finding window %s\n", szWindowName ; hWnd = FindWindow...

CVE-2005-1009

Affected product. BakBone NetVault (Client-Server NetVault, Process Manager service), versions 6.x and 7.x. Vulnerability. A heap-based buffer overflow in the network/communication handling code (triggered by a modified computer name length or a long Name entry in configure.cfg) can lead to arbit...

CVE-2005-1009

Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow 1 remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or 2 local users to execute arbitrary code via a long Name entry in the configure.cfg file...

CVE-2005-1009: Undefined Security Weakness

Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow 1 remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or 2 local users to execute arbitrary code via a long Name entry in the configure.cfg file...

Bakbone NetVault Multiple Vulnerabilities

Binary data 2784.prm...

[Full-disclosure] BakBone products multiple vulnerabilities

The Hat-Squad has found 2 exploitable vulnerabilities affecting BakBone NetVault Backup Software 6.x/7.x At this moment writing this advisory, no decent communications were established with the BakBone technicians, we recommand to set strict ACL rules on the files configure.cfg and to filter all...

BakBone NetVault 6.x/7.x Remote Heap Buffer Overflow Exploit (2)

Exploit for unknown platform in category remote exploits ================================================================ BakBone NetVault 6.x/7.x Remote Heap Buffer Overflow Exploit 2 ================================================================ / for more informations...

BakBone NetVault 6.x/7.x Local Stack Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================ BakBone NetVault 6.x/7.x Local Stack Buffer Overflow Exploit ============================================================ / for more informations class101.org/netv-locsbof.pdf /...

BakBone NetVault 6.x7.x - Remote Heap Buffer Overflow (2)

BakBone NetVault 6.x7.x - Remote Heap Buffer Overflow 2 / for more informations class101.org/netv-remhbof.pdf / include include ifdef WIN32 include "winsock2.h" pragma commentlib, "ws232" else include include include include include include include include include include endif char scode1=...

BakBone NetVault 6.x/7.x - Remote Heap Buffer Overflow (2)

/ for more informations class101.org/netv-remhbof.pdf / include include ifdef WIN32 include "winsock2.h" pragma commentlib, "ws232" else include include include include include include include include include include endif char scode1= "\x33\xC9\x83\xE9"...

BakBone NetVault 6.x/7.x - Local Stack Buffer Overflow

/ for more informations class101.org/netv-locsbof.pdf / include include ifdef WIN32 include "winsock2.h" pragma commentlib, "ws232" else include include include include include include include include include include endif char scode1= /add u:class101 p:class101 Administrators users/...

BakBone NetVault 6.x7.x - Local Stack Buffer Overflow

BakBone NetVault 6.x7.x - Local Stack Buffer Overflow / for more informations class101.org/netv-locsbof.pdf / include include ifdef WIN32 include "winsock2.h" pragma commentlib, "ws232" else include include include include include include include include include include endif char scode1= /add...