Lucene search

[email protected]CVE-2012-0406

HistoryApr 20, 2012 - 4:02 a.m.

CVE-2012-0406

2012-04-2004:02:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2012-0406

dpa

emc

data protection advisor

denial of service

remote attackers

null pointer

daemon crash

authenticateconnection command

7.1 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.017 Low

EPSS

Percentile

87.6%

JSON

The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.

CPENameOperatorVersion
emc:data_protection_advisoremc data protection advisoreq5.7
emc:data_protection_advisoremc data protection advisoreq5.5
emc:data_protection_advisoremc data protection advisoreq5.6
emc:data_protection_advisoremc data protection advisoreq5.8

CPE	Name	Operator	Version
emc:data_protection_advisor	emc data protection advisor	eq	5.7
emc:data_protection_advisor	emc data protection advisor	eq	5.5
emc:data_protection_advisor	emc data protection advisor	eq	5.6
emc:data_protection_advisor	emc data protection advisor	eq	5.8

References

aluigi.altervista.org/adv/dpa_1-adv.txt

www.exploit-db.com/exploits/18688/

www.securityfocus.com/archive/1/522408/30/0/threaded

www.securitytracker.com/id?1026956

7.1 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.017 Low

EPSS

Percentile

87.6%

JSON

Related for CVE-2012-0406

prion1 openvas1 securityvulns2