PT-2013-2724 · Emc · Emc Alphastor

Publicado 2013-01-31 · Atualizado 2014-05-05 · CVE-2013-0930

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC AlphaStor version 4.0 before build 814

Description The issue is related to a buffer overflow in the Drive Control Program (DCP) that allows remote attackers to execute arbitrary code. This is achieved via vectors involving a new device name.

Recommendations For EMC AlphaStor version 4.0 before build 814, update to a version after build 814 to resolve the issue. As a temporary workaround, consider restricting access to the DCP to minimize the risk of exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-0930

ZDI-13-035

Produtos afetados

Emc Alphastor

Referências · 3

• https://zerodayinitiative.com/advisories/ZDI-13-035 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2013-01/0115.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-0930 · Nota de Segurança