Check Point Advisories

Update Protection against Multiple Vendors librpc.dll Stack Buffer Overflow

Check Point Reference: CPAI-2011-101
Date Published: 28 Feb 2011
Severity: High
Last Updated: Saturday 01 January, 2011
Source: Secunia Advisory SA38731
Industry Reference:CVE-2009-2754
Protection Provided by:
Who is Vulnerable? EMC Legato NetWorker
IBM Informix Dynamic Server prior to 10.00.TC9
IBM Informix Dynamic Server prior to 11.10.TC3
Vulnerability Description A buffer overflow vulnerability exists in IBM's Informix Dynamic Server and EMC's Legato Networker. The vulnerability is due to insufficient validation of user input during authentication by the RPC protocol parsing library, librpc.dll, used by the Portmapper service (portmap.exe). Successful exploitation may result in arbitrary code execution on the affected system.
Vulnerability DetailsThe vulnerability is due to improper bounds checking of the Machine Name parameter in the AUTH_UNIX flavour of the remote procedure call authentication.

Protection Overview

×
  Feedback
This website uses cookies for its functionality and for analytics and marketing purposes. By continuing to use this website, you agree to the use of cookies. For more information, please read our Cookies Notice.
OK