Signature Detail
Short Name |
APP:REPLISTOR-DOS |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
APP |
Keywords |
EMC RepliStor rep_srv and ctrlservice Denial of Service |
Release Date |
2010/10/13 |
Update Number |
1791 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: EMC RepliStor rep_srv and ctrlservice Denial of Service
This signature detects attempts to exploit a known denial-of-service vulnerability in EMC RepliStor. It is due to an input validation error while parsing a specially crafted packet. A successful attack can abnormally terminate the targeted service and cause a denial-of-service condition.
Extended Description
EMC RepliStor Server is prone to a remote denial-of-service vulnerability. An attacker could exploit this issue to crash the affected application, denying service to legitimate users. Given the nature of this issue, the attacker may also be able to run arbitrary code, but this has not been confirmed.
Affected Products
- EMC RepliStor 6.2 SP2
- EMC RepliStor 6.2 SP4
- EMC RepliStor 6.2 SP5
- EMC RepliStor 6.2.x
- EMC RepliStor 6.3 SP1
- EMC RepliStor 6.3 SP2
- EMC RepliStor 6.4
- EMC RepliStor 6.4 SP3
References
- BugTraq: 36738
- CVE: CVE-2009-3744