CVE-2012-4607

ERIKS — Thu, 24 Jan 2013 09:04:34 GMT

Does the Palo firewall (version 4.1.10) with threat update version 351 block vulnerability CVE-2012-4607

"Buffer overflow in nsrindexd in EMC NetWorker 7.5.x and 7.6.x before 7.6.5, and 8.x before 8.0.0.6, allows remote attackers to execute arbitrary code via crafted SunRPC data."

Re: CVE-2012-4607

mikand — Thu, 24 Jan 2013 09:50:47 GMT

No hits when I searched for that CVE in threat vault https://threatvault.paloaltonetworks.com/

However searching for networker gave me this:

https://threatvault.paloaltonetworks.com/Home/ThreatDetail/31529

31529

EMC Legato NetWorker Remote Exec Service Buffer Overflow

high

CVE-2007-3618

EMC Legato NetWorker Remote Exec Service Buffer Overflow

Overview

Attack Name	EMC Legato NetWorker Remote Exec Service Buffer Overflow
Description	There exists a buffer overflow vulnerability in EMC legato NetWorker product. The flaw is due to improper boundary protection when processing RPC requests. A remote unauthenticated attacker can leverage this vulnerability by sending crafted RPC message to the target host, potentially inject and execute arbitrary code with System level privileges.
Threat ID	31529
References	http://secunia.com/advisories/26517 http://www.zerodayinitiative.com/advisories/ZDI-07-049.html
Severity	high
Category	overflow

topic Re: CVE-2012-4607 in General Topics

CVE-2012-4607

Re: CVE-2012-4607

EMC Legato NetWorker Remote Exec Service Buffer Overflow

Overview