Secunia

Jo Goossens has reported some vulnerabilities in EMC NetWorker, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

1) A NULL pointer dereference error in the NetWorker server in the processing of RPC packets can be exploited to crash the nsrd service with malformed RPC requests to RPC program number 390109.

2) A boundary error in nsrexecd.exe during processing of RPC requests can be exploited via a malformed RPC request to RPC program number 190113 to cause a heap-based buffer overflow and execute arbitrary code on a vulnerable system.

3) A boundary error in nsrd.exe during processing of RPC requests can be exploited via a malformed RPC request to RPC program number 390109 to cause a heap-based buffer overflow and execute arbitrary code on a vulnerable system.

The vulnerabilities have been reported in version 7.2.1.

Solution
Apply hotfix.
Further details available in Customer Area

Provided and/or discovered by
Jo Goossens

Original Advisory
EMC Corporation:
http://www.legato.com/support/websupport/product_alerts/011606_NW.htm
ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT

iDEFENSE:
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=375
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=374
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=373

Deep Links
Links available in Customer Area