Lucene search

[email protected]NVD:CVE-2011-0321

HistoryFeb 01, 2011 - 6:00 p.m.

CVE-2011-0321

2011-02-0118:00:03

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

AI Score

6.6

Confidence

High

EPSS

0.026

Percentile

90.4%

JSON

librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to (1) register or (2) unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess communication, via crafted UDP packets containing service commands.

Affected configurations

Nvd

Node

emcnetworkerRange≤7.5sp3

emcnetworkerMatch6.0

emcnetworkerMatch6.1

emcnetworkerMatch7.0

emcnetworkerMatch7.2

emcnetworkerMatch7.3

emcnetworkerMatch7.4

emcnetworkerMatch7.4sp1

emcnetworkerMatch7.4sp2

emcnetworkerMatch7.4sp3

emcnetworkerMatch7.4sp4

emcnetworkerMatch7.4sp5

emcnetworkerMatch7.5

emcnetworkerMatch7.5sp1

emcnetworkerMatch7.5sp2

Node

emcnetworkerMatch7.5.3.1

emcnetworkerMatch7.5.3.2

emcnetworkerMatch7.5.3.3

emcnetworkerMatch7.5.3.4

Node

emcnetworkerMatch7.6.0.2

emcnetworkerMatch7.6.0.3

emcnetworkerMatch7.6.0.4

emcnetworkerMatch7.6.0.5

emcnetworkerMatch7.6.0.6

emcnetworkerMatch7.6.0.7

emcnetworkerMatch7.6.0.8

emcnetworkerMatch7.6.0.9

emcnetworkerMatch7.6.1.1

VendorProductVersionCPE
emcnetworker*cpe:2.3:a:emc:networker:*:sp3:*:*:*:*:*:*
emcnetworker6.0cpe:2.3:a:emc:networker:6.0:*:*:*:*:*:*:*
emcnetworker6.1cpe:2.3:a:emc:networker:6.1:*:*:*:*:*:*:*
emcnetworker7.0cpe:2.3:a:emc:networker:7.0:*:*:*:*:*:*:*
emcnetworker7.2cpe:2.3:a:emc:networker:7.2:*:*:*:*:*:*:*
emcnetworker7.3cpe:2.3:a:emc:networker:7.3:*:*:*:*:*:*:*
emcnetworker7.4cpe:2.3:a:emc:networker:7.4:*:*:*:*:*:*:*
emcnetworker7.4cpe:2.3:a:emc:networker:7.4:sp1:*:*:*:*:*:*
emcnetworker7.4cpe:2.3:a:emc:networker:7.4:sp2:*:*:*:*:*:*
emcnetworker7.4cpe:2.3:a:emc:networker:7.4:sp3:*:*:*:*:*:*

Vendor	Product	Version	CPE
emc	networker	*	cpe:2.3:a:emc:networker::sp3::::::*
emc	networker	6.0	cpe:2.3:a:emc:networker:6.0:::::::*
emc	networker	6.1	cpe:2.3:a:emc:networker:6.1:::::::*
emc	networker	7.0	cpe:2.3:a:emc:networker:7.0:::::::*
emc	networker	7.2	cpe:2.3:a:emc:networker:7.2:::::::*
emc	networker	7.3	cpe:2.3:a:emc:networker:7.3:::::::*
emc	networker	7.4	cpe:2.3:a:emc:networker:7.4:::::::*
emc	networker	7.4	cpe:2.3:a:emc:networker:7.4:sp1::::::
emc	networker	7.4	cpe:2.3:a:emc:networker:7.4:sp2::::::
emc	networker	7.4	cpe:2.3:a:emc:networker:7.4:sp3::::::