Description
Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to (1) ctrlservice.exe or (2) rep_srv.exe, possibly related to an integer overflow.
References
- http://www.fortiguardcenter.com/advisory/FGA-2009-13.html
- 34449 vdb-entry
- ADV-2009-1018 vdb-entry
- 1022026 vdb-entry
- 20090409 FGA-2009-003:EMC RepliStor Buffer Overflow Vulnerability mailing-list
- 34699 third-party-advisory