CVEvulnerability
CVE-2011-0321
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-02-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P
- Weaknesses
- CWE-264
Description
librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to (1) register or (2) unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess communication, via crafted UDP packets containing service commands.
Affected configurations
• emc networker (<= 7.5)
• emc networker 6.0
• emc networker 6.1
• emc networker 7.0
• emc networker 7.2
• emc networker 7.3
• emc networker 7.4
• emc networker 7.5
• emc networker 7.5.3.1
• emc networker 7.5.3.2
• emc networker 7.5.3.3
• emc networker 7.5.3.4
• emc networker 7.6.0.2
• emc networker 7.6.0.3
• emc networker 7.6.0.4
• emc networker 7.6.0.5
• emc networker 7.6.0.6
• emc networker 7.6.0.7
• emc networker 7.6.0.8
• emc networker 7.6.0.9
• emc networker 7.6.1.1
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2011-01/0162.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2011-01/att-0162/ESA-2011-003.txt archives.neohapsis.com
- http://secunia.com/advisories/43113 Vendor Advisory
- http://securitytracker.com/id?1025010 securitytracker.com
- http://www.osvdb.org/70686 www.osvdb.org
- http://www.securityfocus.com/bid/46044 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0241 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64997 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2011-01/0162.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2011-01/att-0162/ESA-2011-003.txt archives.neohapsis.com
- http://secunia.com/advisories/43113 Vendor Advisory
- http://securitytracker.com/id?1025010 securitytracker.com
- http://www.osvdb.org/70686 www.osvdb.org
- http://www.securityfocus.com/bid/46044 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0241 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64997 exchange.xforce.ibmcloud.com