PT-2013-5966 · Emc · Emc Replication Manager

Published 2013-12-28 · Updated 2014-01-08 · CVE-2013-6182

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Replication Manager versions prior to 5.5

Description The issue allows local users to gain privileges through a crafted application in a parent directory of an intended directory, due to an unquoted Windows search path vulnerability.

Recommendations For versions prior to 5.5, update to version 5.5 or later to resolve the issue.

Fix

Related Identifiers

CVE-2013-6182

Affected Products

Emc Replication Manager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2013-6182 · Security Note
• http://packetstormsecurity.com/files/124584/EMC-Replication-Manager-Unquoted-File-Path-Enumeration.html · Note
• http://securitytracker.com/id/1029536 · Note
• http://securityfocus.com/bid/64520 · Note
• http://archives.neohapsis.com/archives/bugtraq/2013-12/0139.html · Note
• http://osvdb.org/101430 · Note