BakBone Netvault 6.x/7.x Remote Heap Buffer Overflow
| Newsgroups | gmane.comp.security.vulnerabilities.watch.announce |
|---|---|
| Message-ID | <018901c536cb$1772fd00$0200a8c0__47988.1197367378$1112370257$gmane$org@box> |
According to their website (bakbone.com), BakBone Netvault 6.x/7.x is a professional backup software with several offices in the world and some pro customers as Apple, AT&T, Pirelli, LMU, HP, NIP,NASA, etc.... A Vulnerability exists in the netvault server advisory: class101.org/netv-remhbof.pdf poc: class101.org/36/55/op.php recommendation: to block incoming connections to 20031/tcp, 20031/udp ------------------------------------------------------------- class101 Jr. Researcher Hat-Squad.com -------------------------------------------------------------