CVE-2011-0321 librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allo...
MediumCVSS 6.4
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to (1) register or (2) unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess communication, via crafted UDP packets containing service commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc networker | <= 7.5 | No fix listed |
| emc networker | = 6.0 | No fix listed |
| emc networker | = 6.1 | No fix listed |
| emc networker | = 7.0 | No fix listed |
| emc networker | = 7.2 | No fix listed |
| emc networker | = 7.3 | No fix listed |
| emc networker | = 7.4 | No fix listed |
| emc networker | = 7.4-sp1 | No fix listed |
| emc networker | = 7.4-sp2 | No fix listed |
| emc networker | = 7.4-sp3 | No fix listed |
| emc networker | = 7.4-sp4 | No fix listed |
| emc networker | = 7.4-sp5 | No fix listed |
| emc networker | = 7.5 | No fix listed |
| emc networker | = 7.5-sp1 | No fix listed |
| emc networker | = 7.5-sp2 | No fix listed |
| emc networker | = 7.5.3.1 | No fix listed |
| emc networker | = 7.5.3.2 | No fix listed |
| emc networker | = 7.5.3.3 | No fix listed |
| emc networker | = 7.5.3.4 | No fix listed |
| emc networker | = 7.6.0.2 | No fix listed |
| emc networker | = 7.6.0.3 | No fix listed |
| emc networker | = 7.6.0.4 | No fix listed |
| emc networker | = 7.6.0.5 | No fix listed |
| emc networker | = 7.6.0.6 | No fix listed |
| emc networker | = 7.6.0.7 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| emc networker | = 7.6.0.8 | No fix listed |
| emc networker | = 7.6.0.9 | No fix listed |
| emc networker | = 7.6.1.1 | No fix listed |
References
- 20110126 ESA-2011-003: EMC NetWorker librpc.dll spoofing vulnerability. mailing-list
- archives.neohapsis.com
- 43113 third-party-advisory vendor-advisory
- 1025010 vdb-entry
- 70686 vdb-entry
- 46044 vdb-entry
- ADV-2011-0241 vdb-entry vendor-advisory
- networker-librpc-security-bypass(64997) vdb-entry