Multiple EMC NetWorker Products 'nsrexecd.exe' RPC Request Denial of Service Vulnerability

Bugtraq ID:	31866
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-6219
Remote:	Yes
Local:	No
Published:	Oct 22 2008 12:00AM
Updated:	Apr 16 2015 05:52PM
Credit:	Zhenhua Liu, Xiaopeng Zhang, and Junfeng Jia
Vulnerable:	EMC NetWorker OpenVMS 7.3.2 ECO6 EMC NetWorker Module for PowerSnap 2.4 SP1 EMC NetWorker Module for Microsoft Exchange 5.1 EMC NetWorker Module for Microsoft Applications 2.0 EMC NetWorker Module for MEDITECH 2.0 EMC Networker 7.4.2 EMC Networker 7.3
Not Vulnerable:	EMC NetWorker OpenVMS 7.3.2 ECO7 EMC NetWorker Module for PowerSnap 2.4 SP2 EMC NetWorker Module for Microsoft Exchange 5.1 SP1 EMC NetWorker Module for Microsoft Applications 2.1 EMC NetWorker Module for MEDITECH 2.0 SP1 EMC Networker 7.4 SP3 EMC Networker 7.3 SP4 build 565

Multiple EMC NetWorker Products 'nsrexecd.exe' RPC Request Denial of Service Vulnerability

Multiple EMC NetWorker products are prone to a denial-of-service vulnerability.

Attackers can exploit this issue by sending malicious RPC requests, causing affected applications to consume resources until they become unresponsive. Repeated requests can lead to a denial-of-service condition.

Multiple EMC NetWorker Products 'nsrexecd.exe' RPC Request Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple EMC NetWorker Products 'nsrexecd.exe' RPC Request Denial of Service Vulnerability

Solution:
The vendor has released fixes; please see the references for more information.

Multiple EMC NetWorker Products 'nsrexecd.exe' RPC Request Denial of Service Vulnerability

References:

• NetWorker Homepage (EMC)
  
• Re: FGA-2008-23:EMC NetWorker Denial of Service Vulnerability ([email protected])
  
• FGA-2008-23:EMC NetWorker Denial of Service Vulnerability ([email protected])