CVE-2005-1372

nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2005-05-03

Last modified

2024-08-07

Affected products

• Netvault (Bakbone)

References

• http://marc.info/?l=bugtraq&m=111464410324243&w=2
• http://secunia.com/advisories/15158/
• http://www.osvdb.org/15900
• http://www.securityfocus.com/bid/13408
• http://www.vupen.com/english/advisories/2005/0420
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20302