BakBone Netvault 6.x/7.x Local Stack Buffer Overflow
| Newsgroups | gmane.comp.security.vulnerabilities.watch.announce |
|---|---|
| Message-ID | <018801c536cb$14ed8aa0$0200a8c0__19138.6798899204$1112372897$gmane$org@box> |
According to their website (bakbone.com), BakBone Netvault 6.x/7.x is a professional backup software with several offices in the world and some pro customers as Apple, AT&T, Pirelli, LMU, HP, NIP,NASA, etc.... A Vulnerability exists in the configure.cfg file advisory: class101.org/netv-locsbof.pdf poc: class101.org/36/55/op.php recommendation: to set stricts acl rules on this file. ------------------------------------------------------------- class101 Jr. Researcher Hat-Squad.com -------------------------------------------------------------