Vulnerability Details : CVE-2011-0321
librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to (1) register or (2) unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess communication, via crafted UDP packets containing service commands.
Vulnerability category: Denial of service
Products affected by CVE-2011-0321
- cpe:2.3:a:emc:networker:*:sp3:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:6.1:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.5:sp2:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.5:sp1:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.4:sp5:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.3:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.5:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.4:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.2:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.4:sp3:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.4:sp4:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.4:sp1:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.4:sp2:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.5.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.5.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.5.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.6.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.6.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.6.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.6.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.6.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.6.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.6.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:emc:networker:7.6.0.4:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2011-0321
2.61%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 89 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2011-0321
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.4
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:P |
10.0
|
4.9
|
NIST |
CWE ids for CVE-2011-0321
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2011-0321
-
http://archives.neohapsis.com/archives/bugtraq/2011-01/att-0162/ESA-2011-003.txt
-
http://securitytracker.com/id?1025010
Legato NetWorker 'librpc.dll' Spoofing Lets Remote Users Deny Service and Obtain Potentially Sensitive Information - SecurityTracker
-
http://www.vupen.com/english/advisories/2011/0241
Webmail | OVH- OVHVendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/64997
EMC Networker RPC library (librpc.dll) security bypass CVE-2011-0321 Vulnerability Report
-
http://www.securityfocus.com/bid/46044
EMC NetWorker 'librpc.dll' Spoofing Vulnerability
-
http://archives.neohapsis.com/archives/bugtraq/2011-01/0162.html
Jump to