Vulnerability in Emc Networker
CVE-2011-0321
librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to (1) register or (2) unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess communication, via crafted UDP packets containing service commands.
EPSS: 0.026 (83.8th percentile) — read the EPSS interpretation.
Affected products
- Emc Networker — versions 6.0, 6.1, 7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (x_refsource_CONFIRM)
- security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)
- security_alert@emc.com (vdb-entry, x_refsource_BID)
- security_alert@emc.com (vdb-entry, x_refsource_XF)
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
- security_alert@emc.com (x_refsource_OSVDB, vdb-entry)
- security_alert@emc.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security_alert@emc.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)