EMC Replication Manager Client Control Service Remote Code Execution Vulnerability

Bugtraq ID:	46235
Class:	Unknown
CVE:	CVE-2011-0647
Remote:	Yes
Local:	No
Published:	Feb 07 2011 12:00AM
Updated:	Oct 24 2013 12:50AM
Credit:	Anonymous
Vulnerable:	EMC Replication Manager Client 0 EMC NetWorker Module for Microsoft Applications 2.2 EMC NetWorker Module for Microsoft Applications 2.1
Not Vulnerable:	EMC NetWorker Module for Microsoft Applications 2.3

EMC Replication Manager Client Control Service Remote Code Execution Vulnerability

EMC Replication Manager Client is prone to a remote code-execution vulnerability.

Remote attackers can exploit this issue to execute arbitrary code in the context of the user running the application.

EMC Replication Manager Client Control Service Remote Code Execution Vulnerability

An attacker can exploit this issue by using readily available network utilities.

The following metasploit exploit code is available:

• /data/vulnerabilities/exploits/46235.rb

EMC Replication Manager Client Control Service Remote Code Execution Vulnerability

Solution:
Reports indicate that fixes are available. Please contact the vendor for details.

EMC Replication Manager Client Control Service Remote Code Execution Vulnerability

References:

• Replication Manager Homepage (EMC)
  
• ESA-2011-012: Security update for EMC NetWorker Module for Microsoft Applicatio ()
  
• ZDI-11-061: EMC Replication Manager Client irccd.exe Remote Code Execution Vulne (Zero Day Initiative)