[Full-disclosure] BakBone NetVault 6.x/7.x multiples vulnerabilities + exploit
class101@HAT-SQUAD.com
class101 at hat-squad.com
Wed Apr 13 14:26:00 BST 2005
As a recall, there is one month, the Hat-Squad found 2 security holes
affecting BakBone NetVault all versions.
And as far as I know (sorry if I missed the hotfix), there is still no patch
available .....
We will re-publish this warning as long as (each month) there is no fix.
Some temp. countermeasures are available in both *.pdf
BakBone NetVault 6.x/7.x Remote Heap Buffer Overflow advisory
class101.org/netv-remhbof.pdf
BakBone NetVault 6.x/7.x Remote Heap Buffer Overflow exploit
class101.org/36/55/op.php
BakBone NetVault 6.x/7.x Local Stack Buffer Overflow advisory
class101.org/netv-locsbof.pdf
BakBone NetVault 6.x/7.x Local Stack Buffer Overflow exploit
class101.org/36/55/op.php
-------------------------------------------------------------
class101
Jr. Researcher
Hat-Squad.com
-------------------------------------------------------------
Full-Disclosure is hosted and sponsored by Secunia.