PT-2009-3686 · Emc · Emc Replistor

Published 2009-04-15 · Updated 2018-10-10 · CVE-2009-1119

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC RepliStor versions 6.2 before SP5 EMC RepliStor versions 6.3 before SP2

Description The issue is related to multiple heap-based buffer overflows that allow remote attackers to execute arbitrary code via a crafted message to (1) ctrlservice.exe or (2) rep srv.exe, possibly related to an integer overflow.

Recommendations For EMC RepliStor version 6.2, update to at least SP5 to resolve the issue. For EMC RepliStor version 6.3, update to at least SP2 to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-1119

Affected Products

Emc Replistor

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2009-1119 · Security Note
• http://secunia.com/advisories/34699 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1018 · Vendor Advisory
• http://securitytracker.com/id?1022026 · Note
• http://securityfocus.com/bid/34449 · Note
• http://fortiguardcenter.com/advisory/FGA-2009-13.html · Note
• http://securityfocus.com/archive/1/502575/100/0/threaded · Note