EMC ControlCenter SAN Manager 'msragent.exe' Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	32389
Class:	Boundary Condition Error
CVE:	CVE-2008-5419
Remote:	Yes
Local:	No
Published:	Nov 20 2008 12:00AM
Updated:	May 07 2015 05:21PM
Credit:	An anonymous researcher working with Zero Day Initiative.
Vulnerable:	EMC Control Center 6.0 EMC Control Center 5.2 SP5
Not Vulnerable:

EMC ControlCenter SAN Manager 'msragent.exe' Remote Stack Buffer Overflow Vulnerability

EMC ControlCenter SAN Manager is prone to a remote stack-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied input.

Attackers can leverage this issue to execute arbitrary code in the context of the application. Successful exploits will compromise the application and the underlying computer. Failed attacks will cause denial-of-service conditions.

EMC ControlCenter SAN Manager 'msragent.exe' Remote Stack Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

EMC ControlCenter SAN Manager 'msragent.exe' Remote Stack Buffer Overflow Vulnerability

Solution:
The vendor has released updates. Please see the references for details.

EMC ControlCenter SAN Manager 'msragent.exe' Remote Stack Buffer Overflow Vulnerability

References:

• SAN Manager Homepage (EMC)
  
• ZDI-08-075: EMC Control Center SAN Manager Master SST_CTGTRANS Overflow Vulnerab ([email protected])
  
• ZDI-08-075 EMC Control Center SAN Manager Master SST_CTGTRANS Overflow Vulnerabi (ZDI)