CVE-2012-2288

Related Files

EMC Networker Format String

Posted Nov 6, 2012

Authored by Aaron Portnoy | Site metasploit.com

This Metasploit module exploits a format string vulnerability in the lg_sprintf function as implemented in liblocal.dll on EMC Networker products. This Metasploit module exploits the vulnerability by using a specially crafted RPC call to the program number 0x5F3DD, version 0x02, and procedure 0x06. This Metasploit module has been tested successfully on EMC Networker 7.6 SP3 on Windows XP SP3 and Windows 2003 SP2 (DEP bypass).

tags | exploit

systems | windows

advisories | CVE-2012-2288, OSVDB-85116

SHA-256 | 187180f15865924443eeaee0cc3daf29243c56a73fe15621b307d1808e687b71

Download | Favorite | View

EMC NetWorker Format String

Posted Aug 30, 2012

Authored by Aaron Portnoy | Site emc.com

A format string vulnerability exists in the EMC NetWorker nsrd RPC service that could potentially be exploited by a malicious user to execute arbitrary code. Versions 8.0, 7.6.4, and 7.6.3 are all affected.

tags | advisory, arbitrary

advisories | CVE-2012-2288

SHA-256 | 768328413795e6970904bc4833c2ec26daa72cde036884a7e4eaced57398951b

Download | Favorite | View