BakBone NetVault Remote Heap Overflow Code Execution Vulnerability

Bugtraq ID:	13618
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 13 2005 12:00AM
Updated:	May 13 2005 12:00AM
Credit:	Discovery is credited to BuzzDee.
Vulnerable:	BakBone NetVault 7.3 BakBone NetVault 7.1.1 BakBone NetVault 7.1 BakBone NetVault 7.0
Not Vulnerable:	BakBone NetVault 7.3.1 BakBone NetVault 7.1.3 BakBone NetVault 7.1.2

BakBone NetVault Remote Heap Overflow Code Execution Vulnerability

BakBone NetVault is prone to a remote heap overflow vulnerability.

Exploitation of this issue allows for memory corruption resulting from the application copying excessive network data into a finite sized buffer.

An attacker can gain unauthorized access to an affected computer.

NetVault versions prior to 7.1.2/3 and 7.3.1 are vulnerable.

BakBone NetVault Remote Heap Overflow Code Execution Vulnerability

The following exploit is available. This exploit code has not been verified by Symantec:

• /data/vulnerabilities/exploits/netvault_hof.c

BakBone NetVault Remote Heap Overflow Code Execution Vulnerability

Solution:
The vendor has released upgrades to address this issue. Please contact the vendor to obtain fixes.

BakBone NetVault Remote Heap Overflow Code Execution Vulnerability

References:

• BakBone Home Page (BakBone)
  
• NetVault 7.1.2 Release Notes (BakBone)
  
• NetVault 7.1.3 Release Notes (BakBone)
  
• NetVault 7.3.1 Release Notes (BakBone)
  
• Netvault Remote Heap Overflow (another one) (nolimit bugtraq )