CVE-2011-0647

Related Files

EMC Replication Manager Command Execution

Posted Oct 23, 2013

Authored by temp66, Davy Douhine | Site metasploit.com

This Metasploit module exploits a remote command-injection vulnerability in EMC Replication Manager client (irccd.exe). By sending a specially crafted message invoking RunProgram function an attacker may be able to execute arbitrary code commands with SYSTEM privileges. Affected products are EMC Replication Manager < 5.3. This Metasploit module has been successfully tested against EMC Replication Manager 5.2.1 on XP/W2003. EMC Networker Module for Microsoft Applications 2.1 and 2.2 may be vulnerable too although this module have not been tested against these products.

tags | exploit, remote, arbitrary

advisories | CVE-2011-0647, OSVDB-70853

SHA-256 | 4b4123ce75297cbbade2648fde1e40f016471bf55fff0881e46f5d19e8df6632

Download | Favorite | View

EMC NetWorker Module Arbitrary Code Execution

Posted Mar 30, 2011

Site emc.com

A vulnerability exists in EMC Replication Manager which is embedded in NetWorker Module for Microsoft Applications (NMM). The vulnerability may allow arbitrary code execution on vulnerable installations of the product. Versions affected include EMC NetWorker Module for Microsoft Applications 2.1.x / 2.2.x.

tags | advisory, arbitrary, code execution

advisories | CVE-2011-0647

SHA-256 | 0bf8111e108fe2a222a6dfcc4cca63a04d783a161a247e687ec31c6cc9b95587

Download | Favorite | View

EMC Replication Manager Remote Code Execution

Posted Feb 9, 2011

Site emc.com

EMC Replication Manager contains a potential vulnerability that may allow remote unauthenticated user to execute arbitrary code on vulnerable installations of the EMC Replication Manager. Affected products include EMC Replication Manager versions earlier than 5.3, EMC NetWorker Module for Microsoft Applications versions 2.1.x and 2.2.x.

tags | advisory, remote, arbitrary

advisories | CVE-2011-0647

SHA-256 | 4c30e9aed08c9c586089b2db66c9805be6a020c01be1c707e3e2691828f1e134

Download | Favorite | View

Zero Day Initiative Advisory 11-061

Posted Feb 7, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-061 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the EMC Replication Manager Client. Authentication is not required to exploit this vulnerability. The Replication Manager client installs a service binds the irccd.exe process to TCP port 6542. This service accepts commands using an XML-based protocol. It exposes a vulnerability through it's RunProgram functionality. By abusing this function an attacker can execute arbitrary code under the context of currently logged in user.

tags | advisory, remote, arbitrary, tcp, protocol

advisories | CVE-2011-0647

SHA-256 | b0ba562a152c5c39509c0e06da0aecba913a3c8125b8aaab3312be041ca3e3b2

Download | Favorite | View