According to their website (bakbone.com), BakBone Netvault 6.x/7.x is a professional backup software with several offices in the world and some pro customers as Apple, AT&T, Pirelli, LMU, HP, NIP,NASA, etc.... A Vulnerability exists in the configure.cfg file advisory: class101.org/netv-locsbof.pdf poc: class101.org/36/55/op.php recommendation: to set stricts acl rules on this file. ------------------------------------------------------------- class101 Jr. Researcher Hat-Squad.com -------------------------------------------------------------
This archive was generated by hypermail 2.1.3 : Fri Apr 01 2005 - 08:54:15 PST