« Volver al listado

CVE-2011-0321

Estado: ModificadaMedia (6.4)—

librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to (1) register or (2) unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess communication, via crafted UDP packets containing service commands.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-0321",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-02-01T18:00:03.313",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2011-01/0162.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2011-01/att-0162/ESA-2011-003.txt",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://secunia.com/advisories/43113",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://securitytracker.com/id?1025010",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.osvdb.org/70686",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/46044",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0241",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64997",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2011-01/0162.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2011-01/att-0162/ESA-2011-003.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/43113",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1025010",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/70686",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/46044",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0241",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64997",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to (1) register or (2) unregister RPC services, and consequently cause a denial of service or obtain sensitive information from interprocess communication, via crafted UDP packets containing service commands."
    },
    {
      "lang": "es",
      "value": "librpc.dll en nsrexecd de EMC NetWorker en versiones anteriores a 7.5 SP4, 7.5.3.x anteriores a 7.5.3.5, y 7.6.x anteriores a 7.6.1.2 no mitiga apropiadamente la posibilidad de suplantar una dirección IP de fuente localhost, lo que permite a atacantes remotos (1) registrar o (2) desregistrar servicios RPC, y consecuentemente provocar una denegación de servicio u obtener información confidencial de comunicación entre procesos (\"interprocess communication\") a través de paquetes UDP modificados que contengan comandos de servicio."
    }
  ],
  "lastModified": "2026-06-16T23:27:10.967",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:networker:*:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A0B08EF-3440-4BE8-93AA-2EB530DA0ABB",
              "versionEndIncluding": "7.5"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5967C58A-D318-466D-9370-222FE7034B2D"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6EE54B84-3CA1-490B-9D0C-A3C3C872D2B5"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D2271AE-769D-4A3A-8821-22F22B6018C2"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76F59763-C87A-48A4-890D-B17EAEA6EF0E"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "10954E1B-09A1-4F0A-A2EF-BEDE3B6CE7AA"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33F952DA-3037-4F76-B874-E63F3F280B7D"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.4:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6320CF7-A074-429C-A4C2-7D3F7E19A49F"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.4:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E8C849D-24D2-495E-997A-789FC9D7D56C"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.4:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A65D81EE-FC19-40BE-B9E4-44F2A99D60AE"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.4:sp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5262837-70E0-4F10-8367-4F85DB17B67B"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.4:sp5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B23031B3-799A-47E0-B6A7-3B3C103ED08F"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2AF82110-E275-4746-9BCF-C46CE01A5EA4"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.5:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F7DF3A1-75E4-416B-9346-90629EB85E07"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.5:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A3FE44D-0C02-41B7-985F-A79B858221AC"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:networker:7.5.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8CA7C510-9011-4CAE-A270-F730308BF239"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.5.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6105BB6A-22C4-4725-848A-281A7BF79725"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.5.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD5FA049-FAE2-498D-BE11-213C55872BAC"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.5.3.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2EA36CB9-307F-44B8-8CA0-41BDFE2F14FD"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:networker:7.6.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D87038FD-8115-4024-AB82-EFB0EF5B1C98"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.6.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "985DDA57-DA2C-4EC7-BD42-F0B5E190DBF8"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.6.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2CFD5DF-BCD0-46C6-B18E-60465A6318BA"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.6.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D68C4BE8-A053-46F3-B9F3-DDE3451F30B0"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.6.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2335F8A5-30E3-4452-8FFA-1ED185917313"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.6.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3A22B0B-E8C4-47AB-B276-E8E38BDDE818"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.6.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5FA7C02D-DA10-4B9D-83C9-98BBE81E6166"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.6.0.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "121F391B-295D-4684-A7F4-C91C57033532"
            },
            {
              "criteria": "cpe:2.3:a:emc:networker:7.6.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D8BE130-4CA6-4690-AB01-59A50EB8B997"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}