librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 22.214.171.124, and 7.6.x before 126.96.36.199 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to (1) register or (2) unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess communication, via crafted UDP packets containing service commands.
Publish Date : 2011-02-01 Last Update Date : 2011-02-15
OVAL (Open Vulnerability and Assessment Language) definitions define exactly what should be done to verify
a vulnerability or a missing patch. Check out the OVAL definitions
if you want to learn what you should do to verify a vulnerability.