CVE-2009-1119

EMC RepliStor 6.2-6.3 - Remote Code Execution via Crafted Message to ctrlservice.exe or rep_srv.exe

Title source: llm

Description

Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to (1) ctrlservice.exe or (2) rep_srv.exe, possibly related to an integer overflow.

References (6)

Core 6

Core References

Vendor Advisory x_refsource_misc

http://www.fortiguardcenter.com/advisory/FGA-2009-13.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/34449

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2009/1018

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1022026

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/502575/100/0/threaded

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34699

Scores

EPSS 0.1184

EPSS Percentile 93.8%

Details

CWE

CWE-119

Status published

Products (2)

emc/replistor < 6.2

emc/replistor < 6.3

Published Apr 15, 2009

Tracked Since Feb 18, 2026