PT-2009-2975 · Emc · Emc Autostart

Manuel Santamarina Suarez · Publicado 2009-01-27 · Atualizado 2018-10-11 · CVE-2009-0311

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC AutoStart versions prior to 5.3 SP2

Description The issue allows remote attackers to execute arbitrary code via a packet with a crafted value that is dereferenced as a function pointer in the Backbone service (ftbackbone.exe).

Recommendations For versions prior to 5.3 SP2, update to version 5.3 SP2 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2009-0311

Produtos afetados

Emc Autostart

Referências · 8

• http://osvdb.org/51566 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0311 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-09-009 · Nota
• http://securitytracker.com/id?1021636 · Nota
• http://securityfocus.com/bid/33415 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48197 · Nota
• http://secunia.com/advisories/33667 · Aviso do Fabricante
• http://securityfocus.com/archive/1/500350/100/0/threaded · Nota