BakBone NetVault: Backup Unspecified Heap Buffer Overflow Vulnerability

Bugtraq ID:	23414
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Apr 11 2007 12:00AM
Updated:	Apr 12 2007 12:21AM
Credit:	Oren Laufer <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	BakBone NetVault 7.3.1 BakBone NetVault 7.3 BakBone NetVault 7.1.3 BakBone NetVault 7.1.2 BakBone NetVault 7.1.1 BakBone NetVault 7.1 BakBone NetVault 7.0
Not Vulnerable:	BakBone NetVault 7.4

BakBone NetVault: Backup Unspecified Heap Buffer Overflow Vulnerability

BakBone NetVault: Backup is prone to an unspecified heap-based buffer-overflow vulnerability.

Currently very little is known regarding this issue. This BID will be updated as more information becomes available.

Exploiting this issue may allow attackers to execute arbitrary machine code in the context of the vulnerable application or to cause denial-of-service conditions.

Versions prior to 7.40 are reported vulnerable.

BakBone NetVault: Backup Unspecified Heap Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

BakBone NetVault: Backup Unspecified Heap Buffer Overflow Vulnerability

Solution:
Reportedly, version 7.4.0 is not vulnerable to this issue. Symantec has not verified the legitimacy of this claim. This BID will be updated as more information becomes available.

BakBone NetVault: Backup Unspecified Heap Buffer Overflow Vulnerability

References:

• BakBone Home Page (BakBone)