CVE-2012-0407 - Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 S

CVE-2012-0407

Summary

Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (infinite loop) via a negative 64-bit value in a certain size field.

References

Vulnerable Configurations

cpe:2.3:a:emc:data_protection_advisor:5.5:*:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.5:*:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.5:sp1:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.5:sp1:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.6:*:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.6:*:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.6:sp1:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.6:sp1:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.7:*:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.7:*:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.7:sp1:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.7:sp1:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.8:*:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.8:*:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.8:sp1:*:*:*:*:*:*
cpe:2.3:a:emc:data_protection_advisor:5.8:sp1:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 14-08-2012 - 03:34)
Impact:
Exploitability:

CWE

CWE-189

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

refmap via4

bugtraq	20120418 ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities
exploit-db	18688
misc	http://aluigi.altervista.org/adv/dpa_1-adv.txt
sectrack	1026956

Last major update

14-08-2012 - 03:34

Published

20-04-2012 - 04:02

Last modified

14-08-2012 - 03:34