Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allow remote attackers to execute arbitrary code or cause a denial of service (unresponsive application) via malformed RPC packets to (1) RPC program number 390109 (nsrd.exe) and (2) RPC program number 390113 (nsrexecd.exe).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EMC Legato Networker nsrexecd.exe远程堆溢出漏洞
Vulnerability Description
EMC Legato NetWorker是一款跨平台的备份和恢复系统。 EMC Legato NetWorker在处理特定的RPC请求时存在漏洞，攻击者可能利用此漏洞在服务器上执行任意指令。由于没有正确的处理编号为390113的RPC程序的畸形RPC请求，导致Legato Networker的nsrexecd.exe服务中存在堆溢出漏洞。通过发送上述请求，攻击者可以覆盖部分堆内存，导致执行任意指令。由于备份客户机和服务机都安装了nsrd.exe，因此攻击者可以很快入侵整个网络。
CVSS Information
N/A
Vulnerability Type
N/A