CVE-2007-3618 Stack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows remote attackers to execute arbitrary code via a (1) poll or (2) kill request wit...
HighCVSS 9.3
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows remote attackers to execute arbitrary code via a (1) poll or (2) kill request with a "long invalid subcmd."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc legato networker | = 7.0 | No fix listed |
| emc legato networker | = 7.1.3 | No fix listed |
| emc legato networker | = 7.2 | No fix listed |
| emc legato networker | = 7.2.1 | No fix listed |
| emc legato networker | = 7.3.2 | No fix listed |
References
- 39744 vdb-entry
- 26517 patch third-party-advisory vendor-advisory
- 3043 third-party-advisory
- 20070820 ZDI-07-049: EMC Legato Networker Remote Exec Service Stack Overflow Vulnerabilities mailing-list
- 25375 patch vdb-entry
- 1018590 patch vdb-entry
- ADV-2007-2931 vdb-entry
- www.zerodayinitiative.com
- networker-nsrexecd-bo(36123) vdb-entry