$ cve CVE-2005-1009 JSON

CVE-2005-1009 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 57% (pctl 99)

Patch early

A public exploit exists.

Description

Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the configure.cfg file.

Scoring

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	57.02% — more likely to be exploited than 99% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-05-02
Last modified	2026-06-16

Affected (1)

Vendor	Product
bakbone	netvault

Public exploits

Source	Title	Date
exploit-db	BakBone NetVault - Remote Heap Overflow (Metasploit)	2010-09-20
exploit-db	BakBone NetVault 6.x/7.x - Remote Heap Buffer Overflow (1)	2005-05-17
exploit-db	BakBone NetVault 6.x/7.x - Local Stack Buffer Overflow	2005-04-01
exploit-db	BakBone NetVault 6.x/7.x - Remote Heap Buffer Overflow (2)	2005-04-01

References

→ the Explorer · watch your stack · NVD