Full Disclosure mailing list archives
NovaStor NovaNet <= 13.0 issues
From: mu-b <mu-b () digit-labs org>
Date: Mon, 26 Apr 2010 13:18:02 +0100
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 All - many of the following were inexplicably fixed in the latest version (NovaBACKUP Network 13.0), but still, a 2.5 year run isn't too bad... http://digit-labs.org/files/exploits/novanet-own-lnx.c - - linux remote root <= 12.0 http://digit-labs.org/files/exploits/novanet-read.c - - arbitrary remote dword read <= 12.0 http://digit-labs.org/files/exploits/novanet-own.c - - Windows (no-DEP/NX, NovaNet 11.0) remote SYSTEM <= 12.0 (messy, there is a cleaner version) They seemed to have missed the last one, so it still works on 13.0, but sadly the most useless :( http://digit-labs.org/files/exploits/novanet-dos.c - - null deref remote DoS <= 13.0 - -- mu-b (mu-b () digit-labs org) "Only a few people will follow the proof. Whoever does will spend the rest of his life convincing people it is correct." - Anonymous, "P ?= NP" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkvVhHoACgkQY0H9BP42EjyqLwCfR941RwSLqTuh3xE2jDx4fBm6 REUAn36dzHIwJzq+dmlkZNSACKlz7eOW =aSH0 -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- NovaStor NovaNet <= 13.0 issues mu-b (Apr 26)