EMC NetWorker 'librpc.dll' Spoofing Vulnerability

Bugtraq ID:	46044
Class:	Design Error
CVE:	CVE-2011-0321
Remote:	Yes
Local:	No
Published:	Jan 27 2011 12:00AM
Updated:	May 09 2012 03:50PM
Credit:	Anonymous researcher working with TippingPoint's Zero Day Initiative
Vulnerable:	IBM Aix 7.1.1 IBM Aix 7.1 IBM Aix 6.1.7 IBM Aix 6.1.6 IBM AIX 6.1.5 IBM AIX 6.1.4 IBM AIX 6.1.3 IBM AIX 6.1.2 IBM AIX 6.1.1 IBM AIX 5.3.10 IBM AIX 5.3.9 IBM AIX 5.3.8 IBM AIX 5.3.7 IBM AIX 5.3 L IBM AIX 7.1 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3.12 IBM Aix 5.3.12 IBM AIX 5.3.11 IBM AIX 5.3 EMC Networker 7.4.2 EMC Networker 7.6.1.1 EMC Networker 7.5.3.4 EMC Networker 7.5 SP3 EMC Networker 7.4 SP3 EMC Networker 7.3 SP4 build 565 EMC Networker 7.3
Not Vulnerable:	EMC Networker 7.6.1.2 EMC Networker 7.5.3.5 EMC Networker 7.5 SP4

EMC NetWorker 'librpc.dll' Spoofing Vulnerability

EMC NetWorker is prone to a vulnerability that allows attackers to spoof source addresses.

An attacker can exploit this issue to spoof a source address, allowing the attacker to perform denial-of-service attacks or eavesdrop on process communications.

EMC NetWorker 'librpc.dll' Spoofing Vulnerability

Attackers can exploit this issue with readily available tools.

EMC NetWorker 'librpc.dll' Spoofing Vulnerability

Solution:
Updates are available; please see the references for more information.

EMC NetWorker 'librpc.dll' Spoofing Vulnerability

References:

• NetWorker Homepage (EMC)
  
• ESA-2011-003: EMC NetWorker librpc.dll spoofing vulnerability. ([email protected])
  
• Vulnerability in AIX RPC (IBM)
  
• ZDI-11-168 Multiple Vendor librpc.dll Remote Information Disclosure Vulnerabilit (Zero Day Initiative)