CVE-2011-0647

The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.zerodayinitiative.com/advisories/ZDI-11-061/
http://secunia.com/advisories/43164	Vendor Advisory
http://www.securityfocus.com/bid/46235
http://www.vupen.com/english/advisories/2011/0304	Vendor Advisory
http://www.securityfocus.com/archive/1/516260
http://osvdb.org/70853
https://exchange.xforce.ibmcloud.com/vulnerabilities/65205
http://www.securityfocus.com/archive/1/516282/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:emc:replication_manager:::client:::::*
	cpe:2.3:a:emc:replication_manager:2.0::client:::::
	cpe:2.3:a:emc:replication_manager:5.2.2::client:::::
	cpe:2.3:a:emc:replication_manager:5.2::client:::::

Configuration 2 (hide)

OR	cpe:2.3:a:emc:networker_module:2.1:-:microsoft_applications:::::*
	cpe:2.3:a:emc:networker_module:2.2:-:microsoft_applications:::::*

Information

Published : 2011-02-10 10:00

Updated : 2018-10-09 12:29

NVD link : CVE-2011-0647

Mitre link : CVE-2011-0647

JSON object : View

CWE

CWE-20

Improper Input Validation

Advertisement

Products Affected

emc

replication_manager
networker_module

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.zerodayinitiative.com/advisories/ZDI-11-061/", "name": "http://www.zerodayinitiative.com/advisories/ZDI-11-061/", "tags": [], "refsource": "MISC"}, {"url": "http://secunia.com/advisories/43164", "name": "43164", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/46235", "name": "46235", "tags": [], "refsource": "BID"}, {"url": "http://www.vupen.com/english/advisories/2011/0304", "name": "ADV-2011-0304", "tags": ["Vendor Advisory"], "refsource": "VUPEN"}, {"url": "http://www.securityfocus.com/archive/1/516260", "name": "20110208 ESA-2011-004: EMC Replication Manager remote code execution vulnerability", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://osvdb.org/70853", "name": "70853", "tags": [], "refsource": "OSVDB"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65205", "name": "replicationmanager-irccd-code-execution(65205)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/516282/100/0/threaded", "name": "20110207 ZDI-11-061: EMC Replication Manager Client irccd.exe Remote Code Execution Vulnerability", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2011-0647", "ASSIGNER": "secure@dell.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2011-02-10T18:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:emc:replication_manager:*:*:client:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "5.2.3"}, {"cpe23Uri": "cpe:2.3:a:emc:replication_manager:2.0:*:client:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:emc:replication_manager:5.2.2:*:client:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:emc:replication_manager:5.2:*:client:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:emc:networker_module:2.1:-:microsoft_applications:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:emc:networker_module:2.2:-:microsoft_applications:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-09T19:29Z"}