CVE-2012-2288 Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifi...
HighCVSS 9.3
EPSS 33.1%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specifiers in a message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc networker | = 7.6.3 | No fix listed |
| emc networker | = 7.6.4 | No fix listed |
| emc networker | = 8.0 | No fix listed |
References
- 20120830 ESA-2012-038: EMC NetWorker Format String Vulnerability mailing-list
- 55330 vdb-entry
- 1027459 vdb-entry