CVE-2018-6329

It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a remote attacker to place a privilege escalation exploit on the target system and subsequently execute arbitrary commands.

• CWE-89

• https://support.unitrends.com/UnitrendsBackup/s/article/000001150Vendor Advisory
• https://support.unitrends.com/UnitrendsBackup/s/article/000006003Vendor Advisory
• https://www.exploit-db.com/exploits/44297/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/45913/Exploit, Third Party Advisory, VDB Entry
• https://support.unitrends.com/UnitrendsBackup/s/article/000001150Vendor Advisory
• https://support.unitrends.com/UnitrendsBackup/s/article/000006003Vendor Advisory
• https://www.exploit-db.com/exploits/44297/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/45913/Exploit, Third Party Advisory, VDB Entry

Published

Mar 14, 2018

Last Modified

Jun 17, 2026

Status

Modified