Login Request a demo
Unscored severity · published May 3, 2005
CVE-2005-1372
nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu
–
CVSS
1%
EPSS
No
On KEV
Description
nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netvault · Bakbone
7.1.1; 7.3 · source: NVD
Affected product
NE
Netvault
Bakbone
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1372
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1372
marc.info
http://marc.info/?l=bugtraq&m=111464410324243&w=2
secunia.com
http://secunia.com/advisories/15158/
www.osvdb.org
http://www.osvdb.org/15900
Exploit
http://www.securityfocus.com/bid/13408
www.vupen.com
http://www.vupen.com/english/advisories/2005/0420
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/20302
More from Netvault
–
CVE-2009-3448
npvmgr.exe in BakBone NetVault Backup 8.22 Build 29 allows remote attackers to cause a denial of service (daemon crash) via a packet to (1) TCP or (2) UDP port 20031 with a large…
–
CVE-2007-3181
Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count value in a p_cnct structure in a connect…
–
CVE-2005-1547
Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers to execute arbitrary commands via a large packet to port…
–
CVE-2005-1009
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based…