Signature Detail
Short Name |
APP:RETRO-CL-BO |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
EMC Retrospect Client Crafted Packet Buffer Overflow |
Release Date |
2006/10/09 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: EMC Retrospect Client Crafted Packet Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the EMC Retrospect Client. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the system.
Extended Description
Dantz Retrospect Backup Client is prone to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue allows remote attackers to execute arbitrary machine code in the context of the affected application. Failed exploit attempts will likely crash the application, denying further service to legitimate users.
Affected Products
- Dantz Retrospect Client
- Dantz Retrospect Client For Linux
- Dantz Retrospect Client For Macintosh
- Dantz Retrospect Client For NetWare
- Dantz Retrospect Client For Solaris
- Dantz Retrospect Client For Windows
References
- BugTraq: 17948
- CVE: CVE-2006-2391