medium4.6Public exploit code
CVE-2005-1372
nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Hel…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BakBone NetVault 7.1 - Local Privilege Escalation2005-04-27 · local · windows · Verified
Impact
nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bakbone | Netvault | Versions 7.1.1, 7.3 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=111464410324243&w=2
- http://secunia.com/advisories/15158/
- http://www.osvdb.org/15900
- http://www.securityfocus.com/bid/13408
- http://www.vupen.com/english/advisories/2005/0420
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20302
- http://marc.info/?l=bugtraq&m=111464410324243&w=2
- http://secunia.com/advisories/15158/
- http://www.osvdb.org/15900
- http://www.securityfocus.com/bid/13408
- http://www.vupen.com/english/advisories/2005/0420
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20302