Quest NetVault Backup up to 11.2.0.12 nvwsworker.exe input validation

Summaryinfo

A vulnerability was found in Quest NetVault Backup up to 11.2.0.12. It has been declared as critical. The affected element is an unknown function of the file nvwsworker.exe. Such manipulation leads to input validation. This vulnerability is uniquely identified as CVE-2018-1161. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Quest NetVault Backup up to 11.2.0.12 (Backup Software). Affected by this issue is some unknown processing of the file nvwsworker.exe. The manipulation with an unknown input leads to a input validation vulnerability. Using CWE to declare the problem leads to CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Impacted is confidentiality, integrity, and availability. CVE summarizes:

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. Authentication is not required to exploit this vulnerability. The specific flaw exists within nvwsworker.exe. When parsing the boundary header of a multipart request, the process does not properly validate the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code under the context of SYSTEM. Was ZDI-CAN-4215.

The bug was discovered 01/03/2018. The weakness was disclosed 02/08/2018 (Website). The advisory is available at zerodayinitiative.com. This vulnerability is handled as CVE-2018-1161 since 12/05/2017. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details are known, but there is no available exploit.

The vulnerability was handled as a non-public zero-day exploit for at least 36 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 11.2.0.13 eliminates this vulnerability.

The entries VDB-113044 and VDB-113043 are pretty similar. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Backup Software

Vendor

• Quest

Name

• NetVault Backup

Version

• 11.2.0.0
• 11.2.0.1
• 11.2.0.2
• 11.2.0.3
• 11.2.0.4
• 11.2.0.5
• 11.2.0.6
• 11.2.0.7
• 11.2.0.8
• 11.2.0.9
• 11.2.0.10
• 11.2.0.11
• 11.2.0.12

License

• commercial

Website

• Vendor: https://www.quest.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion