EMC RepliStor Server 'rep_serv.exe' Remote Denial of Service Vulnerability

Bugtraq ID:	36738
Class:	Boundary Condition Error
CVE:	CVE-2009-3744
Remote:	Yes
Local:	No
Published:	Oct 20 2009 12:00AM
Updated:	Apr 13 2015 09:06PM
Credit:	Nine:Situations:Group::bellick
Vulnerable:	EMC RepliStor 6.4 SP3 EMC RepliStor 6.4 EMC RepliStor 6.3 SP2 EMC RepliStor 6.3 SP1 EMC RepliStor 6.2.x EMC RepliStor 6.2 SP5 EMC RepliStor 6.2 SP4 EMC RepliStor 6.2 SP2
Not Vulnerable:	EMC RepliStor 6.4 SP1 EMC RepliStor 6.3 SP3 EMC RepliStor 6.2 SP5 Patch 1

EMC RepliStor Server 'rep_serv.exe' Remote Denial of Service Vulnerability

EMC RepliStor Server is prone to a remote denial-of-service vulnerability.

An attacker could exploit this issue to crash the affected application, denying service to legitimate users. Given the nature of this issue, the attacker may also be able to run arbitrary code, but this has not been confirmed.

EMC RepliStor Server 'rep_serv.exe' Remote Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/36738.php

EMC RepliStor Server 'rep_serv.exe' Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

EMC RepliStor Server 'rep_serv.exe' Remote Denial of Service Vulnerability

References:

• Vendor Homepage (EMC )
  
• EMC RepliStor Server (rep_serv.exe) 6.3.1.3 remote denial of service ([email protected])