Signature Detail

APP: EMC NetWorker nsrindexd RPC Service Buffer Overflow

This signature detects attempts to exploit a known vulnerability in EMC NetWorker. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the application.

Extended Description

Buffer overflow in nsrindexd in EMC NetWorker 7.5.x and 7.6.x before 7.6.5, and 8.x before 8.0.0.6, allows remote attackers to execute arbitrary code via crafted SunRPC data.

Affected Products

• emc networker 7.5.2.0
• emc networker 7.5.2.1
• emc networker 7.5.2.2
• emc networker 7.5.2.3
• emc networker 7.5.2.4
• emc networker 7.5.3
• emc networker 7.5.3.1
• emc networker 7.5.3.2
• emc networker 7.5.3.3
• emc networker 7.5.3.4
• emc networker 7.5.3.5
• emc networker 7.5.4
• emc networker 7.5.4.1
• emc networker 7.5.4.2
• emc networker 7.5.4.3
• emc networker 7.5.4.4
• emc networker 7.5.4.5
• emc networker 7.5.4.6
• emc networker 7.5.4.7
• emc networker 7.5 (sp1)
• emc networker 7.5 (sp2)
• emc networker 7.5 (sp3)
• emc networker 7.6.0.2
• emc networker 7.6.0.3
• emc networker 7.6.0.4
• emc networker 7.6.0.5
• emc networker 7.6.0.6
• emc networker 7.6.0.7
• emc networker 7.6.0.8
• emc networker 7.6.0.9
• emc networker 7.6.1
• emc networker 7.6.1.1
• emc networker 7.6.1.2
• emc networker 7.6.1.3
• emc networker 7.6.1.4
• emc networker 7.6.1.5
• emc networker 7.6.3
• emc networker 7.6.4
• emc networker 7.6.4.1
• emc networker 7.6.4.2
• emc networker 7.6.4.3
• emc networker 7.6.4.4
• emc networker 7.6.4.5
• emc networker 7.6 (sp1)
• emc networker 7.6 (sp2)
• emc networker 8.0
• emc networker 8.0.0.1
• emc networker 8.0.0.2
• emc networker 8.0.0.3
• emc networker 8.0.0.4
• emc networker 8.0.0.5

References

• CVE: CVE-2012-4607