CVE-2007-3618

EMC Legato Networker 7.x.x - Remote Code Execution via Long Invalid Subcmd in nsrexecd.exe

Title source: llm

Description

Stack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows remote attackers to execute arbitrary code via a (1) poll or (2) kill request with a "long invalid subcmd."

References (9)

Core 9

Core References

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/3043

Third Party Advisory x_refsource_misc

http://www.zerodayinitiative.com/advisories/ZDI-07-049.html

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/2931

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/477172/100/0/threaded

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/26517

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/25375

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/36123

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/39744

Patch vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1018590

Scores

EPSS 0.2003

EPSS Percentile 95.6%

Details

Status published

Products (5)

emc/legato_networker 7.0

emc/legato_networker 7.1.3

emc/legato_networker 7.2

emc/legato_networker 7.2.1

emc/legato_networker 7.3.2

Published Aug 21, 2007

Tracked Since Feb 18, 2026