CVE-2005-1372: Bakbone Netvault

Medium severity, CVSS 4.6. EPSS: 1% chance of exploitation in the next 30 days.

nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu.

Affected products

• Bakbone Netvault: version 7.1.1 only; version 7.3 only

Published 2005-05-03. Last modified 2026-06-16.