Lucene search

[email protected]CVE-2008-6219

HistoryFeb 20, 2009 - 5:30 p.m.

CVE-2008-6219

2009-02-2017:30:03

CWE-399

[email protected]

web.nvd.nist.gov

cve-2008-6219

emc

networker

nsrexecd.exe

memory allocation

vulnerability

denial of service

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.8 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.2%

JSON

nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Module for Meditech 2.0 and earlier, and PowerSnap 2.4 SP1 and earlier does not properly control the allocation of memory, which allows remote attackers to cause a denial of service (memory exhaustion) via multiple crafted RPC requests.

Affected configurations

NVD

Node

emcnetworker_clientRange≤7.3sp3

emcnetworker_clientRange≤7.3.2eco6open_vms

emcnetworker_clientMatch7.4

emcnetworker_clientMatch7.4.1

emcnetworker_clientMatch7.4.2

emcnetworker_moduleRange≤2.0-meditech

emcnetworker_moduleRange≤2.0-microsoft_applications

emcnetworker_moduleRange≤5.1-microsoft_exchange

emcnetworker_powersnapRange≤2.4sp1

emcnetworker_serverRange≤7.3sp3

emcnetworker_serverMatch7.4

emcnetworker_serverMatch7.4.1

emcnetworker_serverMatch7.4.2

emcnetworker_storage_nodeRange≤7.3sp3

emcnetworker_storage_nodeRange≤7.3.2eco6open_vms

emcnetworker_storage_nodeMatch7.4

emcnetworker_storage_nodeMatch7.4.1

emcnetworker_storage_nodeMatch7.4.2

CPENameOperatorVersion
emc:networker_clientemc networker clientle7.3
emc:networker_clientemc networker clientle7.3.2
emc:networker_clientemc networker clienteq7.4
emc:networker_clientemc networker clienteq7.4.1
emc:networker_clientemc networker clienteq7.4.2
emc:networker_moduleemc networker modulele2.0
emc:networker_moduleemc networker modulele5.1
emc:networker_powersnapemc networker powersnaple2.4
emc:networker_serveremc networker serverle7.3
emc:networker_serveremc networker servereq7.4

CPE	Name	Operator	Version
emc:networker_client	emc networker client	le	7.3
emc:networker_client	emc networker client	le	7.3.2
emc:networker_client	emc networker client	eq	7.4
emc:networker_client	emc networker client	eq	7.4.1
emc:networker_client	emc networker client	eq	7.4.2
emc:networker_module	emc networker module	le	2.0
emc:networker_module	emc networker module	le	5.1
emc:networker_powersnap	emc networker powersnap	le	2.4
emc:networker_server	emc networker server	le	7.3
emc:networker_server	emc networker server	eq	7.4

Rows per page:

1-10 of 171

References

secunia.com/advisories/32383

www.fortiguardcenter.com/advisory/FGA-2008-23.html

www.securityfocus.com/archive/1/497645/100/0/threaded

www.securityfocus.com/archive/1/497666/100/0/threaded

www.securityfocus.com/bid/31866

www.securitytracker.com/id?1021095

www.vupen.com/english/advisories/2008/2894

exchange.xforce.ibmcloud.com/vulnerabilities/46035

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.8 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.2%

JSON

Related for CVE-2008-6219

cvelist1 prion1 nvd1