Description
nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu.
Affected products
- bakbone / netvault7.1.1 – 7.1.1
- bakbone / netvault7.3 – 7.3
Exploits & proofs of concept
- exploit-dbBakBone NetVault 7.1 - Local Privilege Escalationby Reed Arvin
References
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/20302
- MAILING_LISThttp://marc.info/?l=bugtraq&m=111464410324243&w=2
- MISChttp://www.osvdb.org/15900
- VENDOR_ADVISORYhttp://secunia.com/advisories/15158/
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2005/0420
- MISChttp://www.securityfocus.com/bid/13408
Updated 40m ago · 8 sources