CVE-2015-0538

Related Files

EMC AutoStart 5.4.3 / 5.5.0 Packet Injection

Posted May 4, 2015

Site emc.com

EMC AutoStart versions 5.4.3 and prior and versions 5.5.0 and prior are vulnerability due to insecure communication between the nodes of AutoStart cluster. By sending a specifically crafted packet to the AutoStart agent (ftagent.exe ) running on the remote system, it is possible to execute arbitrary commands with the highest privilege level of the affected system (NT / Authority System privilege for Windows and root privilege for Linux platforms). Exploitation of this vulnerability requires an attacker to know the Autostart domain name (if no default value is used) and the node list.

tags | advisory, remote, arbitrary, root

systems | linux, windows

advisories | CVE-2015-0538

SHA-256 | 04de1488e7188e34d93b76c00932cb126de5c6652955512c29f3e121de038cec

Download | Favorite | View