As a recall, there is one month, the Hat-Squad found 2 security holes affecting BakBone NetVault all versions. And as far as I know (sorry if I missed the hotfix), there is still no patch available ..... We will re-publish this warning as long as (each month) there is no fix. Some temp. countermeasures are available in both *.pdf BakBone NetVault 6.x/7.x Remote Heap Buffer Overflow advisory class101.org/netv-remhbof.pdf BakBone NetVault 6.x/7.x Remote Heap Buffer Overflow exploit class101.org/36/55/op.php BakBone NetVault 6.x/7.x Local Stack Buffer Overflow advisory class101.org/netv-locsbof.pdf BakBone NetVault 6.x/7.x Local Stack Buffer Overflow exploit class101.org/36/55/op.php ------------------------------------------------------------- class101 Jr. Researcher Hat-Squad.com -------------------------------------------------------------
This archive was generated by hypermail 2.1.3 : Wed Apr 13 2005 - 08:58:53 PDT