CVE-2009-1120

State: Published
Severity: Not scored
Published: Jan 15, 2020
Updated: Aug 7, 2024
Reserved: Mar 25, 2009

Description

EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -exposed via the rep_srv.exe process- where the vulnerability is caused by an error when the rep_srv.exe handles a specially crafted packet sent by an unauthenticated attacker.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
RepliStorEMC	before ESA-09-003Affected

References

http://www.zerodayinitiative.com/advisories/ZDI-09-068/
https://fortiguard.com/encyclopedia/ips/17967/emc-replistor-server-service-doasocommand-code-execution

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.