CVE-2012-0406
EMC Data Protection Advisor 5.5-5.8 SP1 - Denial of Service via Malformed AUTHENTICATECONNECTION Command
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-0406. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary The exploit demonstrates two vulnerabilities in EMC Data Protection Advisor: a NULL pointer dereference in the AUTHENTICATECONNECTION command and a CPU exhaustion DoS via a negative 64-bit size field. Both can be triggered remotely on ports 3916 and 4001.
Description
The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.
Exploits (1)
The exploit demonstrates two vulnerabilities in EMC Data Protection Advisor: a NULL pointer dereference in the AUTHENTICATECONNECTION command and a CPU exhaustion DoS via a negative 64-bit size field. Both can be triggered remotely on ports 3916 and 4001.