PT-2012-2539 · Emc · Emc Networker

Publicado 2012-01-27 · Atualizado 2012-02-08 · CVE-2012-0395

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC NetWorker versions 7.5.x through 7.6.x before 7.6.3 SP1 Cumulative Release build 851

Description The issue is related to a buffer overflow in the server, which can be exploited by remote attackers. This can lead to a denial of service, causing the daemon to crash, or potentially allow the execution of arbitrary code. The vulnerability is also related to the parsing of Opcode 0x01 in the indexd.exe component.

Recommendations For EMC NetWorker versions 7.5.x through 7.6.x before 7.6.3 SP1 Cumulative Release build 851, update to version 7.6.3 SP1 Cumulative Release build 851 or later to resolve the issue. As a temporary workaround, consider restricting access to the indexd.exe component to minimize the risk of exploitation.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-0395

ZDI-12-025

Produtos afetados

Emc Networker

Referências · 4

• https://zerodayinitiative.com/advisories/ZDI-12-025 · Nota de Segurança
• http://securityfocus.com/archive/1/521374 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0395 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0395 · Nota