CVE-2017-8895

This Metasploit module exploits a use-after-free vulnerability (CVE-2017-8895) in Veritas/Symantec Backup Exec's NDMP SSL handling. It achieves remote code execution by manipulating SSL sessions to trigger memory corruption, bypassing mitigations like NX, ASLR, and anti-ROP on Windows 8+.

This Metasploit module exploits a use-after-free vulnerability (CVE-2017-8895) in Veritas/Symantec Backup Exec's Remote Agent for Windows. It leverages SSL NDMP connection handling to achieve remote code execution as NT AUTHORITY\SYSTEM by bypassing NX, ASLR, and anti-ROP mitigations.