PT-2015-7389 · Emc · Emc Networker

Publicado 2015-12-05 · Atualizado 2016-12-07 · CVE-2015-6849

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions EMC NetWorker versions prior to 8.0.4.5 EMC NetWorker versions 8.1.x prior to 8.1.3.6 EMC NetWorker versions 8.2.x prior to 8.2.2.2 EMC NetWorker versions 9.0 prior to build 407

Description The issue allows remote attackers to cause a denial of service, resulting in a process outage, by sending malformed RPC authentication messages.

Recommendations For versions prior to 8.0.4.5, update to version 8.0.4.5 or later. For versions 8.1.x prior to 8.1.3.6, update to version 8.1.3.6 or later. For versions 8.2.x prior to 8.2.2.2, update to version 8.2.2.2 or later. For versions 9.0 prior to build 407, update to build 407 or later.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-6849

Produtos afetados

Emc Networker

Referências · 4

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6849 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6849 · Nota de Segurança
• http://securitytracker.com/id/1034287 · Nota
• http://seclists.org/bugtraq/2015/Dec/18 · Nota