CVE-2017-12477

Related Files

Unitrends UEB bpserverd Authentication Bypass / Remote Command Execution

Posted Oct 21, 2017

Authored by Benny Husted, Cale Smith, Jared Arave | Site metasploit.com

It was discovered that the Unitrends bpserverd proprietary protocol, as exposed via xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system.

tags | exploit, remote, arbitrary, root, protocol

advisories | CVE-2017-12477

SHA-256 | 105d0c7def915f528b4d6cbefeecd7e3bcaf3c9c59297fc9da4d9ce27c8a4197

Download | Favorite | View

Unitrends UEB 9.1 bpserverd Remote Command Execution

Posted Oct 5, 2017

Authored by Benny Husted, Cale Smith, Jared Arave

Unitrends UEB version 9.1 bpserverd remote command execution exploit.

tags | exploit, remote

advisories | CVE-2017-12477

SHA-256 | 82f1bd41a9b91ff7fcf43dabc0f2e01ae63a3f65d7f2de5cd8bcbb8efd53673b

Download | Favorite | View