CVE-2008-5420 The SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center before 6.1 does not properly authenticate SST_SENDFILE requests, which allows remote attackers to read arbitrary files.
HighCVSS 7.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center before 6.1 does not properly authenticate SST_SENDFILE requests, which allows remote attackers to read arbitrary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc control center | <= 6.0 | No fix listed |
| emc control center | = 5.2-sp5 | No fix listed |
References
- 50032 vdb-entry
- 32801 third-party-advisory vendor-advisory
- 4709 third-party-advisory
- 20081120 ZDI-08-076: EMC Control Center SAN Manager SST_SENDFILE Remote File Retrieval Vulnerability mailing-list
- 32392 vdb-entry
- 1021263 vdb-entry
- ADV-2008-3220 vdb-entry
- www.zerodayinitiative.com
- controlcenter-msragent-file-download(46753) vdb-entry