26222

2954

20070725 ZDI-07-044: BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability

25068

1018460

ADV-2007-2658

http://www.zerodayinitiative.com/advisories/ZDI-07-044.html

netvaultreport-scheduler-bo(35588)

The remote host is running NetVault Report Manager, a tool for monitoring backup reports.

The Server and Client Scheduler components included in the version of NetVault Report Manager installed on the remote host suffer from a heap overflow vulnerability that can occur when processing overly long filename arguments to 'GET' and 'POST' requests. Code execution is possible under the context of the SYSTEM user.

CVE-2007-3911

high

Tenable Plugins

critical