PT-2009-3686 · Emc · Emc Replistor

Publicado 2009-04-15 · Atualizado 2018-10-10 · CVE-2009-1119

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC RepliStor versions 6.2 before SP5 EMC RepliStor versions 6.3 before SP2

Description The issue is related to multiple heap-based buffer overflows that allow remote attackers to execute arbitrary code via a crafted message to (1) ctrlservice.exe or (2) rep srv.exe, possibly related to an integer overflow.

Recommendations For EMC RepliStor version 6.2, update to at least SP5 to resolve the issue. For EMC RepliStor version 6.3, update to at least SP2 to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-1119

Produtos afetados

Emc Replistor

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2009-1119 · Nota de Segurança
• http://securitytracker.com/id?1022026 · Nota
• http://securityfocus.com/bid/34449 · Nota
• http://secunia.com/advisories/34699 · Aviso do Fabricante
• http://fortiguardcenter.com/advisory/FGA-2009-13.html · Nota
• http://vupen.com/english/advisories/2009/1018 · Aviso do Fabricante
• http://securityfocus.com/archive/1/502575/100/0/threaded · Nota