high7.8Public exploit code
CVE-2012-0406
The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of ser…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- EMC Data Protection Advisor 5.8.1 - Denial of Service2012-03-31 · dos · hardware · Verified
Impact
The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Data Protection Advisor | Versions 5.5, 5.6, 5.7, 5.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/dpa_1-adv.txt
- http://www.exploit-db.com/exploits/18688/
- http://www.securityfocus.com/archive/1/522408/30/0/threaded
- http://www.securitytracker.com/id?1026956
- http://aluigi.altervista.org/adv/dpa_1-adv.txt
- http://www.exploit-db.com/exploits/18688/
- http://www.securityfocus.com/archive/1/522408/30/0/threaded
- http://www.securitytracker.com/id?1026956