Description
Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 2 modules
-
Arkeia Backup Client Type 77 Overflow (Mac OS X)
exploit/osx/arkeia/type77
-
Arkeia Backup Client Type 77 Overflow (Win32)
exploit/windows/arkeia/type77
Exploit-DB 5
- Knox Arkeia Backup Client Type 77 (Windows x86) - Remote Overflow (Metasploit) EDB-16466 · remote · May 9, 2010 · verified
- Knox Arkeia Backup Client Type 77 (OSX) - Remote Overflow (Metasploit) EDB-16865 · remote · May 9, 2010 · verified
- Knox Arkeia Server Backup 5.3.x - Remote Code Execution EDB-828 · remote · Feb 18, 2005 · verified
- Knox Arkeia Backup Client 5.3.3 Type 77 (OSX) - Overflow (Metasploit) EDB-9930 · remote · Feb 18, 2005 · verified
- Knox Arkeia Pro 5.1.12 - Backup Remote Code Execution EDB-102 · remote · Sep 20, 2003 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 14327 third-party-advisory
- 12594 vdb-entry
- 20050218 Knox Arkeia remote root/system exploit mailing-list
- arkeia-backup-client-bo(19398) vdb-entry