Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-37045. PoCs published by El Masas.
AI-analyzed exploit summary This is a technical writeup detailing an unquoted service path vulnerability in Veritas NetBackup 7.0. It explains how the 'NetBackup INET Daemon' service path is vulnerable due to spaces in the path, potentially allowing local privilege escalation if an attacker can place executable code in the system root path.
Description
Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the NetBackup INET Daemon service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files\Veritas\NetBackup\bin\bpinetd.exe to inject malicious code that would execute with elevated LocalSystem privileges.
Exploits (1)
This is a technical writeup detailing an unquoted service path vulnerability in Veritas NetBackup 7.0. It explains how the 'NetBackup INET Daemon' service path is vulnerable due to spaces in the path, potentially allowing local privilege escalation if an attacker can place executable code in the system root path.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H