CVE-2018-6329

This Metasploit module exploits an authentication bypass in Unitrends Enterprise Backup's bpserverd service (CVE-2018-6329) to achieve local privilege escalation by dropping and executing a payload via a Python script.

This exploit leverages an unauthenticated SQL injection (CVE-2018-6328) to achieve remote command execution as a low-privileged user, followed by a local privilege escalation (CVE-2018-6329) to execute arbitrary commands as root. It establishes a reverse shell via a bindshell and uploads a Python-based privilege escalation script.

This Metasploit module exploits an authentication bypass in Unitrends Enterprise Backup's bpserverd service to achieve local privilege escalation by executing arbitrary commands as root via a proprietary protocol exposed through xinetd.