CVE-2011-0321
librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to (1) register or (2) unregister…
Does this matter?
Lower severity and a low EPSS score (2.60%). Track it; it rarely justifies an emergency change on its own.
Description
librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to (1) register or (2) unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess communication, via crafted UDP packets containing service commands.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:P
- EPSS
- 2.60% probability · 84th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- emc/networker
- Source
- security_alert@emc.com
References
- http://archives.neohapsis.com/archives/bugtraq/2011-01/0162.html
- http://archives.neohapsis.com/archives/bugtraq/2011-01/att-0162/ESA-2011-003.txt
- http://secunia.com/advisories/43113Vendor Advisory
- http://securitytracker.com/id?1025010
- http://www.osvdb.org/70686
- http://www.securityfocus.com/bid/46044
- http://www.vupen.com/english/advisories/2011/0241Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64997
- http://archives.neohapsis.com/archives/bugtraq/2011-01/0162.html
- http://archives.neohapsis.com/archives/bugtraq/2011-01/att-0162/ESA-2011-003.txt
- http://secunia.com/advisories/43113Vendor Advisory
- http://securitytracker.com/id?1025010
- http://www.osvdb.org/70686
- http://www.securityfocus.com/bid/46044
- http://www.vupen.com/english/advisories/2011/0241Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64997
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.