CVE-2017-13707

Critical

Published: 27/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-13707 affects Replibit Backup Manager versions earlier than 2017.08.04, allowing privilege escalation to root level via sudo command execution. Attackers can access the vi program through sudo, enabling them to navigate the filesystem and modify critical files such as /etc/passwd.

Risk Assessment

Privilege escalation to root level poses a significant security risk, allowing attackers full control over the system. This could lead to data theft, introduction of malware, or complete system takeover.

Recommendation

It is recommended to update the Replibit Backup Manager to version 2017.08.04 or later to mitigate this vulnerability. Additionally, conducting a user privilege audit and monitoring system logs for unauthorized activities is advisable.

Original NVD description (English source)

Privilege escalation in Replibit Backup Manager earlier than version 2017.08.04 allows attackers to gain root privileges via sudo command execution. The vi program can be accessed through sudo, in order to navigate the filesystem and modify a critical file such as /etc/passwd.