PT-2013-1692 · Emc · Emc Networker

Published 2013-01-17 · Updated 2013-02-11 · CVE-2012-4607

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC NetWorker versions 7.5.x through 7.6.4 EMC NetWorker versions 8.x prior to 8.0.0.6

Description The issue is related to a buffer overflow in the nsrindexd component, allowing remote attackers to execute arbitrary code via crafted SunRPC data. This can be exploited through the nsrindexd service, potentially leading to remote code execution. The nsrck.exe component is also mentioned as vulnerable to remote code execution, but details about its exploitation are not provided.

Recommendations For EMC NetWorker versions 7.5.x through 7.6.4, update to version 7.6.5 or later. For EMC NetWorker versions 8.x prior to 8.0.0.6, update to version 8.0.0.6 or later. As a temporary workaround, consider restricting access to the nsrindexd service and the nsrck.exe component to minimize the risk of exploitation.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-4607

ZDI-13-019

ZDI-13-020

Affected Products

Emc Networker

References · 5

• https://zerodayinitiative.com/advisories/ZDI-13-019 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-4607 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-13-020 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2013-01/0029.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4607 · Note