Unscored severity · published Aug 21, 2007
CVE-2007-3618
Stack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows remote attackers to execute arbitrary code via a (1) poll or…
–
CVSS
7.1%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows remote attackers to execute arbitrary code via a (1) poll or (2) kill request with a "long invalid subcmd."
Exploitation
Is it being used?
Exploit prediction (EPSS)7.1% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LN
Legato Networker · Emc
7.0; 7.1.3; 7.2; 7.2.1; 7.3.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3618
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3618
osvdb.org
http://osvdb.org/39744
Patch
http://secunia.com/advisories/26517
securityreason.com
http://securityreason.com/securityalert/3043
www.securityfocus.com
http://www.securityfocus.com/archive/1/477172/100/0/threaded
Patch
http://www.securityfocus.com/bid/25375
Patch
http://www.securitytracker.com/id?1018590
More from Legato Networker
–
CVE-2009-2754
Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix…
–
CVE-2005-3658
Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1…
–
CVE-2005-3659
nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise…
–
CVE-2005-0358
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to…
–
CVE-2005-0359
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and…