PT-2013-1692 · Emc · Emc Networker

Publicado 2013-01-17 · Atualizado 2013-02-11 · CVE-2012-4607

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC NetWorker versions 7.5.x through 7.6.4 EMC NetWorker versions 8.x prior to 8.0.0.6

Description The issue is related to a buffer overflow in the nsrindexd component, allowing remote attackers to execute arbitrary code via crafted SunRPC data. This can be exploited through the nsrindexd service, potentially leading to remote code execution. The nsrck.exe component is also mentioned as vulnerable to remote code execution, but details about its exploitation are not provided.

Recommendations For EMC NetWorker versions 7.5.x through 7.6.4, update to version 7.6.5 or later. For EMC NetWorker versions 8.x prior to 8.0.0.6, update to version 8.0.0.6 or later. As a temporary workaround, consider restricting access to the nsrindexd service and the nsrck.exe component to minimize the risk of exploitation.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-4607

ZDI-13-019

ZDI-13-020

Produtos afetados

Emc Networker

Referências · 5

• https://zerodayinitiative.com/advisories/ZDI-13-019 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2012-4607 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2013-01/0029.html · Nota
• https://zerodayinitiative.com/advisories/ZDI-13-020 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4607 · Nota