CVE-2011-0647: Input Validation
First published: Thu Feb 10 2011(Updated: )
The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary commands via the RunProgram function to TCP port 6542.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| EMC Replication Manager | <=5.2.3 | |
| EMC Replication Manager | =2.0 | |
| EMC Replication Manager | =5.2 | |
| EMC Replication Manager | =5.2.2 | |
| Dell EMC NetWorker | =2.1 | |
| Dell EMC NetWorker | =2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.zerodayinitiative.com/advisories/ZDI-11-061/
- http://secunia.com/advisories/43164
- http://www.securityfocus.com/bid/46235
- http://www.vupen.com/english/advisories/2011/0304
- http://www.securityfocus.com/archive/1/516260
- http://osvdb.org/70853
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65205
- http://www.securityfocus.com/archive/1/516282/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2011-0647?
CVE-2011-0647 has a high severity rating due to its ability to allow remote attackers to execute arbitrary commands.
How do I fix CVE-2011-0647?
To mitigate CVE-2011-0647, upgrade to EMC Replication Manager Client version 5.3 or later, or upgrade to NetWorker Module for Microsoft Applications version 2.3 or later.
What software is affected by CVE-2011-0647?
CVE-2011-0647 affects EMC Replication Manager Client versions prior to 5.3 and NetWorker Module for Microsoft Applications versions 2.1.x and 2.2.x.
Can CVE-2011-0647 be exploited remotely?
Yes, CVE-2011-0647 can be exploited remotely by attacking TCP port 6542.
What functions are vulnerable in CVE-2011-0647?
The vulnerability in CVE-2011-0647 specifically lies in the RunProgram function of the irccd.exe service.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/emc
- canonical/emc replication manager
- version/emc replication manager/5.2.3
- version/emc replication manager/2.0
- version/emc replication manager/5.2
- version/emc replication manager/5.2.2
- canonical/dell emc networker
- version/dell emc networker/2.1
- version/dell emc networker/2.2