RSS   Podatności dla 'Backup'   RSS

2017-08-07
 
CVE-2017-12479

CWE-noinfo
 
 
It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR environment variable during a web session to elevate an existing low-privilege user to root privileges. A remote attacker with existing low-privilege credentials could then execute arbitrary commands with root privileges.

 
 
CVE-2017-12478

CWE-287
 
 
It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated. A remote attacker could use this flaw to bypass authentication and execute arbitrary commands with root privilege on the target system.

 
 
CVE-2017-12477

 
 
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system.

 

 >>> Vendor: Unitrends 2 Produkty
Backup
Enterprise backup

Copyright 2024, cxsecurity.com

 

Back to Top