First published: Fri Jan 27 2012(Updated: )
Buffer overflow in the server in EMC NetWorker 7.5.x and 7.6.x before 7.6.3 SP1 Cumulative Release build 851 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.
Credit: security_alert@emc.com
Affected Software | Affected Version | How to fix |
---|---|---|
NetWorker | =7.5 | |
NetWorker | =7.5-sp1 | |
NetWorker | =7.5-sp2 | |
NetWorker | =7.5-sp3 | |
NetWorker | =7.5.2.0 | |
NetWorker | =7.5.2.1 | |
NetWorker | =7.5.2.2 | |
NetWorker | =7.5.2.3 | |
NetWorker | =7.5.2.4 | |
NetWorker | =7.5.3 | |
NetWorker | =7.5.3.1 | |
NetWorker | =7.5.3.2 | |
NetWorker | =7.5.3.3 | |
NetWorker | =7.5.3.4 | |
NetWorker | =7.5.3.5 | |
NetWorker | =7.5.4 | |
NetWorker | =7.5.4.1 | |
NetWorker | =7.5.4.2 | |
NetWorker | =7.5.4.3 | |
NetWorker | =7.6 | |
NetWorker | =7.6-sp1 | |
NetWorker | =7.6-sp2 | |
NetWorker | =7.6.0.2 | |
NetWorker | =7.6.0.3 | |
NetWorker | =7.6.0.4 | |
NetWorker | =7.6.0.5 | |
NetWorker | =7.6.0.6 | |
NetWorker | =7.6.0.7 | |
NetWorker | =7.6.0.8 | |
NetWorker | =7.6.0.9 | |
NetWorker | =7.6.1 | |
NetWorker | =7.6.1.1 | |
NetWorker | =7.6.1.2 | |
NetWorker | =7.6.1.3 | |
NetWorker | =7.6.1.4 | |
NetWorker | =7.6.1.5 | |
NetWorker | =7.6.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-0395 is categorized as a high-severity vulnerability due to the potential for remote code execution and denial of service.
To fix CVE-2012-0395, you should upgrade to EMC NetWorker version 7.6.3 SP1 or later.
CVE-2012-0395 can cause daemon crashes leading to service outages and may allow remote attackers to execute arbitrary code.
CVE-2012-0395 affects EMC NetWorker versions 7.5.x and 7.6.x prior to 7.6.3 SP1.
There are no known workarounds for CVE-2012-0395, so upgrading is the recommended solution.