BakBone NetVault Long Machine Name Heap Overflow Vulnerability

Bugtraq ID:	13594
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 11 2005 12:00AM
Updated:	May 11 2005 12:00AM
Credit:	Discovered by HatSquad.
Vulnerable:	BakBone NetVault 7.3 BakBone NetVault 7.1.1 BakBone NetVault 7.1 BakBone NetVault 7.0
Not Vulnerable:	BakBone NetVault 7.3.1 BakBone NetVault 7.1.3 BakBone NetVault 7.1.2

BakBone NetVault Long Machine Name Heap Overflow Vulnerability

BakBone NetVault is reportedly affected by a heap overflow vulnerability.

This issue arises if a machine is assigned a long machine name.

NetVault versions prior to 7.1.2/3 and 7.3.1 are vulnerable.

BakBone NetVault Long Machine Name Heap Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

BakBone NetVault Long Machine Name Heap Overflow Vulnerability

Solution:
The vendor has released upgrades to address this issue. Please contact the vendor to obtain fixes.

BakBone NetVault Long Machine Name Heap Overflow Vulnerability

References:

• BakBone Home Page (BakBone)
  
• NetVault 7.1.2 Release Notes (BakBone)
  
• NetVault 7.1.3 Release Notes (BakBone)
  
• NetVault 7.3.1 Release Notes (BakBone)
  
• BakBone NetVault last warning (class )