CVEvulnerability

CVE-2011-0321

6.4 MEDIUM Published 2011-02-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-02-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P
Weaknesses
CWE-264

Description

librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to (1) register or (2) unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess communication, via crafted UDP packets containing service commands.

Affected configurations

• emc networker (<= 7.5) • emc networker 6.0 • emc networker 6.1 • emc networker 7.0 • emc networker 7.2 • emc networker 7.3 • emc networker 7.4 • emc networker 7.5 • emc networker 7.5.3.1 • emc networker 7.5.3.2 • emc networker 7.5.3.3 • emc networker 7.5.3.4 • emc networker 7.6.0.2 • emc networker 7.6.0.3 • emc networker 7.6.0.4 • emc networker 7.6.0.5 • emc networker 7.6.0.6 • emc networker 7.6.0.7 • emc networker 7.6.0.8 • emc networker 7.6.0.9 • emc networker 7.6.1.1

Related

Weakness · not in database (1)

References