Back to CVE Browser

CVE-2015-4067

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile24.83th

PublishedMay 29, 2015

Last ModifiedMay 6, 2026

Vulnerability Description

Integer overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote attackers to execute arbitrary code via crafted template string specifiers in a serialized object, which triggers a heap-based buffer overflow.

Affected Platforms (CPE)

📦

Dell

Netvault Backup

= 10.0.5

References & Advisories

🔗 http://www.securityfocus.com/bid/74841

🔗 http://www.zerodayinitiative.com/advisories/ZDI-15-240/

🔗 http://www.securityfocus.com/bid/74841

🔗 http://www.zerodayinitiative.com/advisories/ZDI-15-240/

Related Vulnerabilities

CVE-2017-174139.8

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.1...

CVE-2017-174149.8

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.1...

CVE-2017-174159.8

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.1...

CVE-2017-174129.8

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.1...