Detections
Analytics
EMC Retrospect Client Packet Handling Remote Overflow
high Nessus Plugin ID 21327
Language:
Synopsis
It is possible to execute code on the remote backup client.Description
According to its version number, the installed instance of Retrospect client is susceptible to a buffer overflow attack that can be triggered by a packet starting with a specially crafted sequence of bytes.An unauthenticated, remote attacker may be able to exploit this flaw to execute code on the remote host.
Solution
Upgrade to a newer version of Retrospect Client.See Also
http://www.acrossecurity.com/aspr/ASPR-2006-05-17-1-PUB.txt
https://www.securityfocus.com/archive/1/434726/100/0/threaded
Plugin Details
Severity: High
ID: 21327
File Name: retrospect_client_overflow.nasl
Version: 1.25
Type: remote
Family: Gain a shell remotely
Published: 5/5/2006
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.3
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 5/4/2006
Reference Information
CVE: CVE-2006-2391
CERT: 186944