PT-2018-11051 · Dell Emc · Networker

Marek Cybul · Published 2018-03-19 · Updated 2018-04-19 · CVE-2018-1218

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC NetWorker versions prior to 9.2.1.1 Dell EMC NetWorker versions prior to 9.1.1.6 Dell EMC NetWorker version 9.0.x Dell EMC NetWorker versions prior to 8.2.4.11

Description The issue arises from a buffer overflow condition in the 'nsrd' daemon when handling certain messages. This could be exploited by a remote unauthenticated attacker to cause a denial of service to the users of NetWorker systems.

Recommendations For versions prior to 9.2.1.1, update to version 9.2.1.1 or later. For versions prior to 9.1.1.6, update to version 9.1.1.6 or later. For version 9.0.x, update to a later version. For versions prior to 8.2.4.11, update to version 8.2.4.11 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-1218

Affected Products

Networker

References · 5

• 🔥 https://exploit-db.com/exploits/44332 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-1218 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1218 · Vendor Advisory
• http://securitytracker.com/id/1040546 · Note
• http://seclists.org/fulldisclosure/2018/Mar/43 · Note