EMC RepliStor Multiple Remote Heap Based Buffer Overflow Vulnerabilities
BID:27915
Info
EMC RepliStor Multiple Remote Heap Based Buffer Overflow Vulnerabilities
| Bugtraq ID: | 27915 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-6426 CVE-2008-6426 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 20 2008 12:00AM |
| Updated: | Jul 05 2016 09:38PM |
| Credit: | Stephen Fewer of Harmony Security is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
EMC RepliStor 6.2 SP2 |
| Not Vulnerable: | |
Discussion
EMC RepliStor Multiple Remote Heap Based Buffer Overflow Vulnerabilities
EMC RepliStor is prone to multiple remote heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.
A remote attacker may be able to exploit these issues to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.
These issues affect EMC RepliStor 6.2 SP2; other versions may also be affected.
EMC RepliStor is prone to multiple remote heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.
A remote attacker may be able to exploit these issues to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.
These issues affect EMC RepliStor 6.2 SP2; other versions may also be affected.
Exploit / POC
EMC RepliStor Multiple Remote Heap Based Buffer Overflow Vulnerabilities
Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
EMC RepliStor Multiple Remote Heap Based Buffer Overflow Vulnerabilities
Solution:
The vendor released updates and a knowledgebase article (emc179808) to address these issues. Please contact the vendor for information on obtaining and apply these updates.
Solution:
The vendor released updates and a knowledgebase article (emc179808) to address these issues. Please contact the vendor for information on obtaining and apply these updates.
References
EMC RepliStor Multiple Remote Heap Based Buffer Overflow Vulnerabilities
References:
References:
- RepliStor Homepage (EMC)
- iDefense Security Advisory 02.19.08: EMC RepliStor Multiple Heap Overflow Vulner (iDefense Labs
- EMC RepliStor Multiple Heap Overflow Vulnerabilities (iDefense Labs)