PT-2009-1693 · Emc+3 · Networker Server+11

Published 2009-02-20 · Updated 2018-10-11 · CVE-2008-6219

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: EMC NetWorker Server versions 7.3.x through 7.4.2 EMC NetWorker Storage Node versions 7.3.x through 7.4.2 EMC NetWorker Client versions 7.3.x through 7.4.2 EMC NetWorker Client for Open VMS version 7.3.2 ECO6 and earlier EMC NetWorker Module for Microsoft Exchange version 5.1 and earlier EMC NetWorker Module for Microsoft Applications version 2.0 and earlier EMC NetWorker Module for Meditech version 2.0 and earlier EMC NetWorker PowerSnap version 2.4 SP1 and earlier

Description: The issue is related to the nsrexecd.exe component in multiple EMC Networker products, which does not properly control memory allocation. This allows remote attackers to cause a denial of service, specifically memory exhaustion, by sending multiple crafted RPC requests.

Recommendations: For EMC NetWorker Server versions 7.3.x through 7.4.2, update to a version that includes the fix for the memory allocation issue. For EMC NetWorker Storage Node versions 7.3.x through 7.4.2, update to a version that includes the fix for the memory allocation issue. For EMC NetWorker Client versions 7.3.x through 7.4.2, update to a version that includes the fix for the memory allocation issue. For EMC NetWorker Client for Open VMS version 7.3.2 ECO6 and earlier, update to a version that includes the fix for the memory allocation issue. For EMC NetWorker Module for Microsoft Exchange version 5.1 and earlier, update to a version that includes the fix for the memory allocation issue. For EMC NetWorker Module for Microsoft Applications version 2.0 and earlier, update to a version that includes the fix for the memory allocation issue. For EMC NetWorker Module for Meditech version 2.0 and earlier, update to a version that includes the fix for the memory allocation issue. For EMC NetWorker PowerSnap version 2.4 SP1 and earlier, update to a version that includes the fix for the memory allocation issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-6219

Affected Products

Meditech

Applications

Exchange Server

Networker Client

Networker Client For Open Vms

Emc Networker Module For Meditech

Networker Module For Microsoft Applications

Networker Module For Microsoft Exchange

Networker Powersnap

Networker Server

Networker Storage Node

Openvms

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2008-6219 · Security Note
• http://secunia.com/advisories/32383 · Vendor Advisory
• http://securityfocus.com/archive/1/497666/100/0/threaded · Note
• http://securitytracker.com/id?1021095 · Note
• http://securityfocus.com/bid/31866 · Note
• http://securityfocus.com/archive/1/497645/100/0/threaded · Note
• http://vupen.com/english/advisories/2008/2894 · Note
• http://fortiguardcenter.com/advisory/FGA-2008-23.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46035 · Note